Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
File: 2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa (raw, json)
Hash identifier: 5U6c1RXc7FTfIK8e1GKSKBPlh60gR3S8nS7hPEyOLUo=
Subject key identifier: 65:24:0A:06:6C:E5:85:2E:BE:DA:48:80:BF:5A:9C:54:5D:1E:4F:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8DF90C3A3657694868700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.40.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:df:90:c3:a3:65:76:94:86:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4b624828-79f9-42de-bf09-44a5eff4fe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:60:72:ee:1d:c7:71:ad:69:4d:6a:41:81:
a8:6f:5a:95:3f:67:d9:86:24:8f:4c:4a:3d:e9:6b:
8d:63:04:01:5a:b1:cc:9a:f2:cc:3c:44:b1:59:6f:
73:44:09:0e:fb:4a:a3:42:2b:a3:e7:a8:01:bb:46:
c7:ad:58:c5:e7:1d:80:f0:39:08:0a:f4:af:87:c2:
23:8f:99:67:16:77:45:04:31:e4:74:73:78:bb:72:
16:e6:af:10:5c:39:0a:17:6a:4a:b3:32:52:6a:f4:
a4:a2:28:70:09:41:7f:f7:0e:a3:45:c8:29:20:98:
c6:14:36:c5:29:62:92:b6:93:da:fb:7c:41:cd:f0:
ad:8c:e8:5b:2d:65:38:56:60:32:1e:f5:e6:1e:fb:
99:78:32:2f:31:96:77:fc:d0:d7:f0:e6:36:42:a1:
16:56:07:e0:bf:46:9e:89:ef:25:ed:90:47:96:a2:
f7:69:0a:48:b7:29:39:6f:95:af:cf:48:04:85:d6:
13:9a:13:33:2c:05:fd:b8:04:db:8c:ae:fc:1a:94:
4c:ca:6a:71:a5:d9:32:83:e5:34:b5:b2:b7:5d:c1:
52:66:30:cc:61:c6:34:1f:a2:1e:be:9e:a2:79:15:
24:c7:0d:e5:dd:06:1d:8a:d9:b0:cf:fc:24:61:c6:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:0A:06:6C:E5:85:2E:BE:DA:48:80:BF:5A:9C:54:5D:1E:4F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:fd:c2:91:2c:00:bd:36:f9:f8:47:dc:c6:aa:33:c1:b9:08:
59:3d:b0:51:7f:2e:b0:46:e1:35:e7:85:c2:ad:15:32:3c:4a:
44:9d:9e:ba:4e:29:42:d4:69:1f:5f:cf:cf:a0:ff:67:1e:2e:
36:b8:e9:d5:ef:f7:8d:ab:32:d1:94:bf:8f:ce:3a:1f:b9:f4:
64:73:ca:6f:d9:4c:7b:e2:0b:65:4e:78:06:83:7f:cf:0c:1d:
45:ff:58:f3:6a:5e:14:c2:64:6f:ce:8d:a8:6f:9b:81:e7:9a:
2b:1e:6d:78:e2:36:79:43:55:cf:43:6f:b4:82:a3:b2:00:e5:
a0:b4:06:e2:e2:cc:c9:35:7f:40:a9:e2:64:fe:33:c9:9e:f3:
ec:06:d4:7b:9e:9f:db:bf:16:cc:3d:96:6f:de:a8:f0:1b:f1:
24:f8:5c:1f:d7:50:ed:d8:79:d1:77:8f:fa:28:ae:d1:9d:07:
f9:90:af:af:f7:5a:a3:36:6b:eb:ba:7d:92:3f:85:d9:30:fe:
0f:74:be:76:56:3e:1f:e6:bc:ca:3f:35:d8:65:da:5b:41:47:
d6:29:76:c9:d7:f8:b2:b2:ab:e3:f5:2e:d3:1c:19:6f:52:d0:
6f:50:8a:51:ad:48:eb:74:8a:90:08:6f:4b:c7:e0:08:2a:37:
b0:c2:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:57 2025 by rpki-client