Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48f37a49-4c90-383e-b392-e8d71f7254d1.roa
File: 48f37a49-4c90-383e-b392-e8d71f7254d1.roa (raw, json)
Hash identifier: Sxmnbib3CLG4VSFrHUBTf+a9WyRMHQX15gn71KPfHMU=
Subject key identifier: E3:C7:17:0B:28:9B:2A:2C:66:50:14:34:C6:EB:86:FA:DC:31:B6:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7843C463CBEF0EC84BFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48f37a49-4c90-383e-b392-e8d71f7254d1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.36.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:84:3c:46:3c:be:f0:ec:84:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1f04423b-29f9-4f3e-9bdd-3c9823d9ca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:63:af:ca:9a:03:2f:04:5d:1f:d6:69:ec:
e4:a2:ae:bd:ea:0f:63:f4:3d:93:17:1f:aa:8a:e3:
ac:65:04:f4:b7:63:1a:a9:ab:bf:d3:70:d5:4d:96:
92:57:a8:b5:d3:e6:f5:b4:6f:c5:01:55:91:19:ea:
f3:3f:f7:0c:de:34:b8:fd:1c:33:8c:93:73:c9:18:
85:80:9b:c6:d2:06:50:6a:c8:95:14:78:94:44:6f:
e2:0a:6f:11:29:8e:50:c1:53:bc:5c:e3:97:5a:a9:
c8:55:8b:e9:41:f0:48:3d:11:5d:8c:a1:99:38:2c:
25:0e:72:0d:4f:93:99:e3:76:2f:50:a1:5a:07:a6:
ad:a3:59:e5:fd:4b:5d:55:29:64:5e:c4:f8:07:e7:
00:7b:61:42:7e:d7:43:21:83:4d:00:f5:6c:97:b9:
a7:10:40:02:30:16:52:91:93:f9:ea:c4:4f:1f:97:
3f:d5:5d:d5:67:d2:55:a8:a8:8e:d1:89:a2:6e:2e:
59:ee:fb:1d:e0:5d:0e:14:47:dd:2f:6c:2c:db:da:
61:ff:42:3c:93:5a:2a:ad:a3:41:6d:3d:0a:f0:38:
32:f8:12:9e:ff:89:f6:29:2b:b7:da:7c:51:aa:49:
fb:e7:d1:c7:a1:cd:dd:18:49:5f:bb:b3:44:db:ed:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:17:0B:28:9B:2A:2C:66:50:14:34:C6:EB:86:FA:DC:31:B6:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48f37a49-4c90-383e-b392-e8d71f7254d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:3d:70:ad:df:83:e1:91:10:f6:50:9d:72:dd:1f:06:89:cf:
8c:91:bc:e6:9c:c9:eb:43:7e:be:9f:85:12:84:d1:13:3e:ee:
c8:74:51:03:17:27:c6:66:2f:c5:f1:85:31:3c:89:57:cb:db:
75:40:d5:cf:9b:9a:0a:d9:f7:10:d0:e7:35:a9:01:44:de:98:
6a:65:d4:76:7b:9d:91:1c:0b:04:71:42:5c:cb:c9:c5:b9:dd:
2f:7a:3a:3c:bb:15:c2:79:6b:b1:fd:3e:a3:0f:9c:12:67:2d:
b2:95:b3:b6:2e:37:7b:ef:32:7f:2b:9a:ba:28:0d:2d:83:9e:
e7:80:b0:da:e1:9b:39:54:d6:7d:ad:97:4e:06:ee:c0:1f:4e:
75:49:9b:54:80:b9:79:6f:a3:53:28:7b:f9:2b:48:46:ef:7e:
61:a5:1e:3c:f8:c2:ec:03:c5:70:fd:c7:85:d8:24:53:bc:6b:
43:b5:95:d0:38:c0:16:20:10:cb:8a:37:13:e9:f5:46:32:f1:
18:0d:b9:8f:dd:b9:d1:81:13:bc:99:af:4d:46:c4:bf:7c:b7:
0e:0f:94:97:56:3c:76:00:63:a2:a5:04:39:e9:d1:31:a4:d4:
a2:31:25:13:37:31:bd:7d:9b:c2:db:2b:e6:60:7b:fc:5f:74:
a6:6a:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:37:01 2025 by rpki-client