Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3465376c-9a01-31bb-a636-29e7e5f7bd43.roa
File: 3465376c-9a01-31bb-a636-29e7e5f7bd43.roa (raw, json)
Hash identifier: ip5Rnur+FjdNS33xiTB6Ek/0/dE5jqproeAXtLgAGC0=
Subject key identifier: EC:EC:F0:53:64:9E:58:52:22:1D:E0:AD:89:BF:33:94:56:66:F4:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8DAE8B2AFBA14417E3200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3465376c-9a01-31bb-a636-29e7e5f7bd43.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.34.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:da:e8:b2:af:ba:14:41:7e:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d7b8afa2-9734-4553-bb7d-4fcc41d454b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:0e:ac:89:87:83:19:5c:3b:50:fb:8f:6e:
15:69:99:37:89:0d:17:d0:73:71:d9:69:b1:11:7f:
62:90:81:d0:31:16:dc:0f:29:a9:4c:ef:51:f8:3d:
ae:33:f5:12:d7:c3:3d:1a:ea:06:ab:83:e0:26:8a:
59:d6:5f:e3:24:e0:b4:1e:8e:c3:cf:a3:ea:32:9f:
be:bd:9d:63:89:49:a3:a7:44:2c:cd:14:a1:97:06:
50:60:48:40:fb:5e:06:68:42:ba:ce:1a:a8:28:44:
90:08:d3:8a:d2:c7:5a:ed:f3:13:00:8f:1f:8e:29:
11:b3:6d:3b:a6:d3:aa:f2:81:c5:fe:41:80:15:25:
f0:29:c2:76:09:96:e4:0d:17:ed:0b:32:a9:bc:62:
8c:d9:f7:2b:4a:d0:9e:eb:2f:67:0d:80:bc:29:b0:
58:eb:94:8c:81:1a:08:95:12:fb:30:94:b6:76:38:
d2:1c:7a:92:86:5d:fb:2a:4c:7c:31:18:5c:a4:5d:
f6:56:f9:a6:34:3b:36:d0:d4:ff:25:52:dc:73:2b:
08:20:78:26:ad:99:d1:af:6f:08:67:c8:3a:4c:43:
1c:ce:95:bb:c8:12:73:6f:c3:78:98:16:bc:0c:b7:
bf:6a:43:b8:9d:09:9f:d8:b0:05:3f:d8:cb:68:52:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EC:F0:53:64:9E:58:52:22:1D:E0:AD:89:BF:33:94:56:66:F4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3465376c-9a01-31bb-a636-29e7e5f7bd43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:98:19:7b:f9:3a:41:93:9a:91:c0:b4:cf:1a:6e:69:79:22:
a2:24:d3:93:03:8d:ba:0b:18:de:18:49:d9:b1:e7:23:12:d6:
40:fb:97:b1:3e:d4:1c:37:f5:e6:5c:b4:ac:ad:b1:76:0c:26:
b5:d4:34:83:a0:a9:a3:c1:d5:1d:61:2c:95:02:54:c4:1b:ca:
b8:18:81:27:62:9c:83:23:b7:af:2d:48:47:9b:db:d4:f9:d5:
d9:0a:ec:98:5f:4d:ac:cd:54:1b:0d:18:79:ca:16:7a:80:bd:
fe:69:3b:ea:ee:c6:0f:31:b8:9b:00:c1:ea:f1:3c:bb:8c:69:
c4:3b:77:76:5c:6c:28:5b:a8:68:3b:24:f9:57:bb:8c:8f:00:
a7:20:2d:dc:60:f4:52:fb:af:5a:4f:ff:5c:b2:23:97:62:dc:
d0:83:18:be:f8:7a:6e:47:5f:6c:e9:22:61:ad:f0:53:6b:40:
1b:b0:0e:0a:4e:56:b3:44:a8:3e:dc:0b:d8:43:59:dd:af:16:
9c:67:e0:d8:36:63:43:80:c0:36:53:04:bf:79:ce:cf:ad:9e:
27:09:02:8f:71:d1:a1:3f:26:81:d8:32:d1:10:88:18:9f:a7:
cc:30:18:a7:61:47:29:cf:64:a7:fc:dd:9b:5d:3d:01:eb:1f:
f7:48:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:53 2025 by rpki-client