Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29454c08-be0a-3c75-a50e-0e74128b84e8.roa
File: 29454c08-be0a-3c75-a50e-0e74128b84e8.roa (raw, json)
Hash identifier: DcEKrF6M6ZuDSZNbDSscrm7LACWKwxb5ApVV36kwsrQ=
Subject key identifier: E7:E0:19:04:8B:B8:1E:EB:ED:23:BB:4A:AB:45:D4:F0:87:0D:2D:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF416E0A9FA05B05DBD080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29454c08-be0a-3c75-a50e-0e74128b84e8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.38.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:41:6e:0a:9f:a0:5b:05:db:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=41b65c45-2404-46f8-a3c8-4f207a033638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:8e:52:9b:da:e4:87:6a:9a:7a:ed:8a:a5:
6c:37:fe:a3:fd:42:48:20:aa:a4:77:39:5e:44:40:
f3:fb:1b:0a:ad:21:dc:d1:57:ce:3f:e6:7e:f9:26:
1a:a2:03:6e:6d:98:ba:32:2e:46:56:21:a3:62:5c:
a3:2f:2a:2e:9a:06:ce:df:cb:8f:73:47:0e:6f:75:
36:9f:28:ce:cc:da:43:80:b5:86:42:26:a2:3d:80:
90:09:e2:f4:ef:f9:8c:04:66:e0:2c:3b:b0:2b:22:
b2:b3:8b:d1:05:a7:e5:17:16:03:5e:ca:b5:b2:72:
e8:97:38:4e:54:d7:47:7b:21:f0:4f:da:d4:54:9f:
b3:8d:9c:2a:4c:14:58:cc:31:28:d6:33:5b:0d:fa:
21:aa:c9:0e:c5:0c:6c:4c:51:48:14:2c:48:ab:83:
6d:78:16:60:3d:1e:98:f0:4b:95:f2:1f:a8:b5:e0:
dd:47:9b:73:9e:3e:2c:c7:bf:79:2b:f2:10:23:3d:
e5:c1:0d:ac:f2:a8:67:0d:26:f5:9b:23:5a:08:99:
50:0b:89:5e:73:d5:33:39:5c:d3:7d:60:55:d8:fd:
e3:31:8d:1b:ac:69:fa:4a:2a:49:d6:c5:80:8c:c8:
49:24:bb:34:03:fe:a2:64:46:35:0b:43:24:c9:8b:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:19:04:8B:B8:1E:EB:ED:23:BB:4A:AB:45:D4:F0:87:0D:2D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29454c08-be0a-3c75-a50e-0e74128b84e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:3d:3a:92:7d:6b:d8:f1:fc:5e:65:41:3b:b1:30:a2:a9:e7:
2e:09:39:8a:be:32:c4:85:fc:6e:81:19:cc:d5:9b:c9:62:61:
a5:83:ff:b6:d1:43:3a:5b:45:87:cc:ea:fb:91:a5:7c:87:cb:
19:15:6f:95:77:d6:b4:e1:f4:a1:10:7a:36:c5:d3:e9:5d:cc:
b1:0c:51:59:f9:3c:0f:4b:8c:78:79:48:0b:67:ff:47:03:b0:
64:04:0b:5c:f2:54:07:88:ef:f7:56:3c:9d:3d:b5:52:d8:81:
fe:31:e4:8c:19:39:89:4f:94:47:3e:a8:4f:c9:16:87:c1:6c:
7d:5c:01:07:92:c4:d1:cf:c0:f4:1b:d3:6f:05:35:f7:01:26:
24:9c:30:2f:18:f8:f8:10:72:d6:b2:bc:f6:ae:c6:7b:27:c8:
8c:64:1e:2c:f7:7c:52:40:7c:93:84:e6:ab:27:a9:21:85:5b:
5a:bd:b6:90:bb:3b:00:7c:19:4b:c7:75:a7:80:d2:df:79:b1:
8e:a0:45:33:7c:58:44:6f:f9:d6:3e:14:40:f2:72:dc:08:ea:
fc:95:2b:9b:7f:0a:2e:76:ec:28:d7:8f:be:22:4d:89:96:de:
67:5c:bb:ec:04:29:29:90:d5:a5:81:ee:be:47:fa:f9:12:38:
24:44:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:18 2025 by rpki-client