Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2939c940-8efc-3237-817d-0f71296f441d.roa
File: 2939c940-8efc-3237-817d-0f71296f441d.roa (raw, json)
Hash identifier: C+bmvKubq/skjV0ILTFSF+9smC8LCNw6kMVBMiTATiI=
Subject key identifier: 77:65:1C:1E:53:87:A2:36:E1:4B:6E:A9:83:54:81:EC:2C:DB:B1:4C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DBE28CD915C6963068700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2939c940-8efc-3237-817d-0f71296f441d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 68.47.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:be:28:cd:91:5c:69:63:06:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=90bb1588-3109-46d0-8596-e6750053eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:70:a4:9f:d7:ad:f1:59:88:95:dc:15:59:
3d:fe:f1:9a:b8:f9:b2:d8:6e:fb:e8:73:7b:14:8d:
00:de:1d:c6:4a:e7:4d:e4:f2:db:72:1b:fa:c5:5a:
47:88:30:85:f6:4a:8b:e8:b0:dd:91:00:10:54:57:
77:a6:2a:a6:96:b1:d6:9d:4d:12:86:62:c9:bd:36:
96:0b:d2:d7:bc:fc:66:d0:62:c2:11:49:fa:25:c6:
4f:60:53:f1:f2:9b:15:ec:5a:cb:01:a7:a9:8d:d3:
ba:f5:5e:5b:53:c4:69:7c:01:7e:fe:c8:95:66:24:
86:57:6f:23:1c:b0:7d:e9:9c:9d:48:5c:43:67:61:
a6:90:39:84:9e:10:7c:d5:a6:57:fe:9a:64:dc:d3:
74:93:63:3d:da:b1:74:90:7a:b5:cd:48:0f:97:b4:
58:9a:f2:47:08:10:cf:6c:f5:65:ae:09:5b:d7:51:
04:40:24:d8:42:47:bf:4a:8b:5b:d3:29:e7:8d:a0:
90:68:e8:59:82:a4:bc:5c:ff:1e:5a:37:11:6b:e6:
11:16:9e:19:10:e4:57:0e:4d:f8:ba:ef:36:9a:84:
2a:92:73:70:aa:86:fe:8e:33:67:5a:4d:13:f3:53:
1c:4c:10:98:93:66:6a:a3:9e:24:e7:87:04:60:0a:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:1C:1E:53:87:A2:36:E1:4B:6E:A9:83:54:81:EC:2C:DB:B1:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2939c940-8efc-3237-817d-0f71296f441d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.47.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ea:6e:45:7e:12:10:51:44:50:29:dc:3f:0e:77:57:9c:2a:
74:50:32:fa:4b:07:14:b6:c3:54:fe:00:f6:1d:69:12:61:63:
30:4a:10:0c:54:04:ea:03:30:c4:c0:56:57:e4:8e:7f:b5:99:
fe:b3:3b:e7:cc:9d:62:91:86:d6:b6:21:ce:f1:b2:df:5d:b8:
4b:99:fc:bd:d4:8d:12:73:c0:fb:dc:eb:e1:36:3d:15:d0:5a:
d2:ff:f9:4f:68:19:f1:aa:59:22:f9:0a:c3:90:4d:a9:56:43:
ee:25:8d:d7:73:fa:5d:26:bf:f7:0b:6c:e0:86:68:dc:25:21:
d0:55:31:c2:7d:b4:67:8a:9d:df:9b:db:0b:c5:fd:74:9d:a2:
67:17:ef:30:16:0b:c9:25:c2:49:87:8b:f7:26:f5:27:0d:68:
ab:7f:58:5b:bb:a1:e1:26:42:92:12:24:fa:c1:e3:19:6f:3a:
b2:3b:89:1e:88:9e:ce:e5:f0:3c:2c:33:71:3c:c7:f8:ae:4c:
8b:3e:31:4e:1d:54:7d:d0:db:ee:d7:e9:6e:03:f3:78:e2:9c:
f4:02:00:10:82:e5:9a:ed:a4:28:51:6b:eb:1d:64:1e:96:e9:
72:3f:bd:7b:0b:d3:95:ba:f2:50:47:60:1f:d6:f0:90:19:f1:
59:9a:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:29 2025 by rpki-client