Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a3e8b97-39cd-3920-adcf-3451c26321bf.roa
File: 2a3e8b97-39cd-3920-adcf-3451c26321bf.roa (raw, json)
Hash identifier: YDqc/m9zAqbbU07mF3G9R53Pq00z/HYSJp6MWJfgsog=
Subject key identifier: B3:CF:27:D5:22:DC:0A:A7:FD:69:CD:33:62:40:CB:C4:17:2E:E7:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8E4266B9FD30999D11480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a3e8b97-39cd-3920-adcf-3451c26321bf.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.42.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:e4:26:6b:9f:d3:09:99:d1:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3926f27b-41f8-4de3-a9e4-aaabffa048f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:fd:25:d0:28:5a:b0:a2:4d:16:2b:72:fc:
cb:50:a3:8e:c7:0d:ed:7a:a1:d4:68:c3:1c:a5:f8:
1b:aa:e1:66:7e:1d:87:38:92:42:60:7b:25:0c:80:
b2:c7:f7:54:a1:62:f4:f5:b0:c5:af:db:f2:90:bf:
b2:89:a2:d6:65:1c:47:01:16:93:d6:76:f5:08:d7:
1e:9b:52:59:48:bd:b8:72:4e:e5:c2:5a:c2:af:97:
54:20:3a:88:b2:49:ff:c5:ee:cc:00:46:07:d8:16:
a3:da:a0:98:16:97:05:2b:8c:80:39:b6:68:55:70:
af:2f:a4:4e:24:ad:fa:ef:e8:96:63:5c:1b:03:bd:
d1:39:73:85:40:37:44:f5:1d:33:14:0d:e3:8b:32:
5e:0f:ad:7e:a3:a5:2f:11:7f:aa:64:16:4d:47:c2:
12:02:17:d8:a5:98:09:d9:18:46:f1:49:a6:83:99:
c0:44:03:21:9b:3f:7a:9f:90:ed:b2:64:d2:a5:34:
e5:d5:2d:e7:2b:05:b8:de:79:e0:4a:2c:88:1e:98:
d7:ce:be:0d:e6:1f:ec:dc:00:70:6e:ea:d9:49:e7:
d2:78:91:61:ba:8b:84:bf:a5:a7:be:4b:36:ab:a4:
49:c1:5f:14:9d:3b:fc:9c:b9:a5:a3:76:76:59:c0:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:27:D5:22:DC:0A:A7:FD:69:CD:33:62:40:CB:C4:17:2E:E7:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a3e8b97-39cd-3920-adcf-3451c26321bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:43:bc:4a:08:37:ea:55:09:32:b4:ee:f3:df:62:1a:88:ae:
9f:c3:ef:8f:23:32:f4:af:53:56:c2:06:b6:ee:0b:b5:8c:91:
86:3e:58:76:a5:e7:ed:49:4e:c0:3d:31:0e:52:b8:9c:05:73:
c5:4b:c0:40:d8:5e:52:87:81:14:64:6b:c6:ac:f8:e1:1e:f2:
33:c6:db:d9:e2:0e:c0:3a:4a:16:5e:cf:b4:49:6d:9e:f7:bb:
9f:32:b5:2d:e0:4f:b6:89:99:68:7a:90:fc:db:c6:7b:7e:08:
a1:ce:d0:ae:b5:e3:bc:2b:35:ef:34:43:83:71:1b:b1:6a:2e:
f0:40:b2:63:51:2c:35:86:9d:81:00:36:17:8f:93:55:c7:fe:
62:2b:86:4a:c8:83:7b:18:8e:67:76:ef:da:cc:53:8f:ae:cb:
69:72:34:71:5c:13:dd:d1:b4:0d:29:16:0a:f5:58:f0:89:3e:
02:04:33:98:69:24:db:f1:b2:33:a4:ea:92:a3:ee:85:03:58:
22:01:c7:af:89:5c:ea:14:23:52:45:3a:8f:88:cd:09:f7:53:
8a:9a:dd:f8:eb:13:f9:ae:37:fb:15:59:9f:99:19:49:f4:5d:
f5:57:d5:39:51:0c:44:63:84:0f:4e:14:75:3d:06:d3:32:a8:
13:ce:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:00 2025 by rpki-client