Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41a90356-5d66-3dae-a38c-ae60f1a33907.roa
File: 41a90356-5d66-3dae-a38c-ae60f1a33907.roa (raw, json)
Hash identifier: TVWAZ6qVlHWPFvo+B1y4mRyvEi8+BVp7cPiVuMLgotw=
Subject key identifier: 4C:2A:57:35:39:17:DF:4B:3F:AA:C2:52:0F:BF:DB:04:8D:5F:79:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DF8CED78F5B6594E40680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41a90356-5d66-3dae-a38c-ae60f1a33907.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 68.59.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:f8:ce:d7:8f:5b:65:94:e4:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=b77988fb-e4dd-42f3-8f95-2a0fca8df151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:b5:c6:58:7d:cb:34:5e:93:6c:ed:52:9e:
f3:fd:5e:30:d1:9b:12:1a:79:7c:75:8d:04:4e:6b:
0b:95:fe:d8:79:5f:fa:87:36:d6:e2:ed:95:85:88:
7f:f5:b4:32:ff:65:46:ba:75:a3:bb:11:70:18:47:
60:b3:f8:dd:0c:0c:72:15:b8:8b:7c:1b:eb:4d:24:
e4:c5:0d:03:77:81:c2:0a:43:41:59:08:ea:c2:b4:
3c:0b:fb:fd:c4:cf:bd:bd:11:1f:26:a3:16:7e:42:
3d:13:11:06:69:6c:89:9f:bb:6c:d4:70:d8:d6:aa:
9a:1a:1a:38:0c:e7:0e:67:84:2e:94:80:25:ba:77:
d1:84:26:32:b1:d9:d4:e2:42:0d:f7:7a:14:24:71:
1a:63:44:da:2b:2f:f0:f0:2f:3c:99:dc:a2:18:ad:
2b:59:31:50:02:ff:e0:0e:9d:fd:d4:1d:16:b4:af:
70:9f:d5:19:cd:03:36:7e:2d:7e:50:59:58:41:76:
c1:ce:4d:b6:b0:a3:41:28:4f:da:d9:7e:f2:57:df:
bb:62:9f:c6:05:f6:3f:44:19:e3:bb:42:e1:70:e2:
32:21:89:02:f1:cc:24:a4:8c:b6:cc:54:0e:27:18:
11:8b:c4:91:6c:2a:9b:2b:48:9c:9e:fc:ff:b4:92:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:57:35:39:17:DF:4B:3F:AA:C2:52:0F:BF:DB:04:8D:5F:79:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41a90356-5d66-3dae-a38c-ae60f1a33907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:ad:97:59:fc:e8:cb:4b:92:eb:ed:81:66:a6:61:a8:7a:d7:
6d:37:33:83:ec:47:c0:6e:c2:ad:3f:49:cc:2f:4c:ec:9b:fe:
74:74:e5:42:10:4f:7e:a5:c8:65:cf:bd:ec:ea:a2:dc:5a:d9:
64:17:18:3f:40:49:a7:b9:2c:1b:d3:ab:82:f0:6a:97:92:28:
e6:ee:c6:74:6b:52:cb:6b:0e:66:cb:a1:5c:44:4f:00:82:91:
c2:06:b7:a8:5a:92:79:84:ea:74:33:12:01:4c:29:85:dc:cc:
a7:ca:ea:4c:80:33:79:f6:7e:74:b6:4f:f4:ba:32:d1:52:23:
ab:3d:5c:30:43:9c:0d:41:5b:8e:a9:89:fb:69:fc:a5:03:85:
70:c7:3d:e1:c1:97:73:bc:fe:19:e0:55:09:91:ca:25:46:e6:
b0:60:d2:f4:82:97:22:c3:b0:c6:a9:b8:46:a0:d0:5d:ae:de:
f8:8f:77:93:9d:44:fb:aa:3d:e0:58:03:96:2a:80:23:a0:cf:
cd:82:ef:b4:0c:3e:01:0f:e2:7d:fe:bb:5a:e4:43:f6:74:92:
66:a9:6b:f5:74:77:48:69:6d:f5:d6:bc:5b:8f:26:e9:0d:4d:
ff:06:fe:a4:71:49:ab:fa:73:af:9e:ab:0c:19:01:23:4a:9c:
25:d3:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:52:12 2025 by rpki-client