Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa
File: 1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa (raw, json)
Hash identifier: ZfvyvV8jVKAhyBOsX8F6wUaPoHA1mtlX5iIwKWfEDVQ=
Subject key identifier: 1D:B5:BF:99:E2:E0:63:6A:71:77:A1:DB:14:AB:07:11:DA:F1:BE:06
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C2454B2F74C1BE4DAC640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33668
IP address blocks: 68.42.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:24:54:b2:f7:4c:1b:e4:da:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7a821931-f4b6-45a4-acb3-7ff2d4482360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c1:da:a0:26:65:1c:9a:6e:be:17:14:c4:a1:
1a:7c:14:00:cf:1b:91:b3:a3:84:6d:94:a9:c4:79:
0a:f7:32:42:f5:43:1f:2e:80:99:f2:2e:b8:d4:54:
14:a8:b7:82:5a:3f:d6:07:f6:f5:11:8c:51:f1:23:
19:33:e0:47:de:da:19:f7:4c:75:84:96:1a:18:67:
f5:1c:2b:6c:f7:79:fa:7c:3a:02:f0:88:97:10:8c:
0b:f5:d0:53:d3:35:b5:35:8d:b9:b9:02:9f:09:df:
58:03:9b:5f:b5:8c:29:b9:9e:d6:3d:33:f9:b1:a2:
dd:e7:fd:de:2c:32:39:9c:f6:a2:ed:97:1f:22:17:
4a:cb:e1:83:60:d0:52:75:83:d8:f2:81:a9:ff:11:
55:86:a2:ff:ad:49:d6:33:55:d3:87:da:55:35:56:
32:fb:b9:7b:d3:3b:f0:99:55:36:5e:47:f5:13:d5:
bc:76:2c:42:29:01:08:a7:d8:b1:f5:0e:4c:2e:de:
cd:7e:36:be:a4:ab:e2:12:c9:2b:13:8e:dd:f6:41:
3f:58:71:8d:ae:f3:8a:2f:63:c8:db:38:be:3e:37:
3b:e4:61:da:31:09:2e:34:aa:32:96:de:3b:65:10:
47:69:d3:f8:9c:6e:de:1c:62:17:41:7a:4a:b0:69:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:BF:99:E2:E0:63:6A:71:77:A1:DB:14:AB:07:11:DA:F1:BE:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:64:46:31:4c:94:c8:dd:2a:1f:31:07:79:26:29:90:c0:65:
22:ca:54:79:64:f6:31:b7:5e:8a:5e:77:b2:d0:89:95:92:87:
d5:74:fc:28:9a:85:b9:52:e6:57:9f:31:04:86:62:a8:4e:62:
0c:14:43:32:a8:ad:65:6d:6a:c0:10:50:31:71:7b:d5:a1:5f:
1c:c3:5b:f8:1c:ff:44:53:54:50:31:fd:62:6d:68:57:42:a9:
26:6d:52:22:46:fe:d5:17:c0:f7:83:76:22:fb:25:89:b7:41:
68:59:53:8e:53:7d:81:41:b8:e6:01:d5:cf:47:fb:56:48:f3:
53:5c:20:87:92:20:49:23:bf:8e:4f:11:6f:f3:cf:d1:d1:3f:
57:74:72:5e:fb:c9:db:01:78:fe:cc:7e:f7:1d:2a:f0:bc:d1:
40:ec:4b:23:bb:8e:27:54:8a:e2:84:e1:57:f5:94:38:f2:67:
47:65:10:df:a2:b7:9f:a7:96:e1:d1:33:71:84:a8:89:5c:4e:
32:1e:65:bb:a3:85:7c:30:8b:3c:47:0d:79:87:a2:be:81:49:
20:ef:97:54:32:a1:48:f0:2b:f7:2f:89:29:81:8e:a1:88:70:
01:64:7f:fe:78:b4:06:63:be:65:58:2b:c0:f4:ff:f7:6d:1c:
22:38:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:49 2025 by rpki-client