Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34dba34a-9d92-3583-b730-e38c3e07e21b.roa
File: 34dba34a-9d92-3583-b730-e38c3e07e21b.roa (raw, json)
Hash identifier: 0GECD9G0WGg5hjTT+8R6yl3gSuEwGolb2KSQIFdUqwQ=
Subject key identifier: 6F:55:B2:6C:A4:DC:68:7E:F2:64:6D:C6:E9:79:0E:BE:4D:5C:B8:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D9FE7C9D3C63EBBE52FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34dba34a-9d92-3583-b730-e38c3e07e21b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 68.85.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:9f:e7:c9:d3:c6:3e:bb:e5:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6f7d6914-1514-4711-8a79-c719d0eeda14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:91:25:e0:bc:dc:f6:72:f8:8a:e2:d3:19:
02:5e:82:76:47:bf:49:4a:42:3d:d7:50:f6:bc:93:
45:93:0c:f0:eb:5c:bc:7f:0a:3a:da:9c:79:77:63:
43:17:eb:4a:d2:7c:49:03:4f:47:54:8d:e3:4e:d1:
5e:0d:6d:90:f6:14:8d:f4:16:5c:98:43:66:fc:b4:
ad:3d:42:cd:e1:0b:7f:7b:f4:31:91:40:da:a4:30:
06:e9:d4:f2:af:18:4e:ee:2c:a2:f4:3b:ec:3e:15:
81:1b:85:76:fb:c2:11:59:65:cb:c0:65:17:8f:f5:
a7:e1:bc:ff:63:a7:24:cb:59:f8:dd:0d:9d:00:20:
ce:3e:96:63:af:d3:43:99:11:69:df:57:fb:81:a6:
9e:97:61:64:72:6e:5a:53:28:4b:35:6a:51:97:ee:
d4:95:8a:cc:a5:f7:f5:04:13:be:78:17:f0:05:a9:
a1:62:d7:15:05:4a:6e:13:1f:54:dd:7a:7e:3b:05:
33:f6:1b:a5:93:e7:6a:e5:56:d3:fb:96:37:d1:39:
fc:2c:36:05:f8:c6:0a:5c:f2:c7:a3:4c:f2:fb:bf:
88:6b:04:de:fb:cf:2b:99:6d:be:5b:02:9f:73:33:
a2:b8:8c:ee:af:cd:55:b6:b1:69:79:50:dc:a2:df:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:B2:6C:A4:DC:68:7E:F2:64:6D:C6:E9:79:0E:BE:4D:5C:B8:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34dba34a-9d92-3583-b730-e38c3e07e21b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:db:7c:7c:fe:44:99:16:7c:c1:43:88:86:6e:d3:d1:10:34:
ea:7a:bc:6c:bd:b5:b8:02:4f:f3:fc:32:77:06:d9:14:4c:5f:
ac:1d:ea:06:b6:87:68:2e:fd:60:72:5a:fe:0d:0b:a4:d2:07:
f6:a6:3e:9b:bd:69:a7:a4:f5:61:3e:7b:03:01:a1:69:59:e9:
53:bd:51:5f:ba:2f:df:2d:bc:fa:de:c2:e2:1a:19:91:5c:67:
f7:12:a8:65:69:27:58:52:e4:ba:a9:8c:81:a6:b8:af:5c:dd:
6f:c0:ff:0f:17:7b:b4:c4:ec:64:2f:47:e4:7e:ea:31:f3:4c:
b3:ad:a0:46:51:49:9f:15:db:fb:ab:79:31:ea:b9:41:34:23:
c9:cc:48:9b:60:ac:ca:ba:bc:39:45:c6:3a:60:8f:9a:47:67:
cf:7a:43:d6:ad:e3:7a:6d:78:e0:9b:b2:64:96:63:bc:fa:d7:
a8:8a:66:5f:ab:b0:93:94:b4:bd:f9:f8:12:af:a6:c0:9a:e7:
a4:70:06:3a:c3:91:ee:e6:c8:eb:e6:69:f9:7d:38:1c:d5:25:
03:9e:a2:fc:d8:7c:d7:4c:29:a1:51:31:1b:b0:87:3f:2c:df:
50:78:e9:71:c0:b8:b2:97:06:1c:da:27:ea:01:b3:68:48:a9:
2c:dc:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:04 2025 by rpki-client