Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5f8813-e42b-308e-9245-8d9162b98fb0.roa
File: 4b5f8813-e42b-308e-9245-8d9162b98fb0.roa (raw, json)
Hash identifier: l3h8pcEyRUsfoxKT8c2ZC+5OltAoLX6ThqmWgE7RirM=
Subject key identifier: 24:4D:BA:7D:F9:8A:83:36:EF:FE:AD:0D:4B:0D:FE:E7:12:ED:89:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DDDB95E43B16C90739C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5f8813-e42b-308e-9245-8d9162b98fb0.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 68.86.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:dd:b9:5e:43:b1:6c:90:73:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=068f5aed-40cc-42f8-84f3-1e059b906966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:0a:09:b8:8d:d7:16:e9:88:46:a5:0f:e9:
ca:46:eb:6f:9a:b9:58:25:93:b0:e0:de:5c:5f:e1:
21:cc:35:a9:e6:4c:a9:c6:f3:88:47:6b:ab:f8:2a:
6e:c7:d5:d0:17:b0:7e:a2:d5:7d:29:03:b1:ab:ff:
a2:5d:d6:1e:77:ba:e2:60:93:a9:10:ad:50:ad:3e:
56:37:8a:23:79:98:56:1c:13:8b:e6:da:66:0d:0e:
c3:0a:3e:5b:c3:da:8c:e6:77:bc:f4:e4:61:e8:00:
62:12:fb:76:35:63:95:49:4e:a1:6e:c8:d5:31:3d:
d1:6e:68:b7:24:a7:db:66:5e:0a:51:4b:4e:59:72:
c4:80:54:31:92:4e:88:d8:92:a4:09:65:ff:2b:72:
aa:2d:56:e7:89:6c:15:7a:2d:53:bb:2d:ae:2b:13:
e5:ba:00:3a:e3:56:ae:ad:93:e3:e7:bd:7f:9c:cb:
d5:b4:df:26:1c:b8:bc:10:57:39:18:ce:a5:18:40:
51:84:ad:8a:5d:f6:37:5f:60:c5:a7:8d:a4:8a:0e:
b3:0d:6a:37:d0:6e:e5:72:bc:24:ef:e7:cf:b5:96:
90:7e:2d:91:f1:4e:b5:fb:ed:33:96:9b:b7:75:36:
18:ce:c7:49:5c:25:3b:ab:52:4a:8b:0e:cc:97:89:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:BA:7D:F9:8A:83:36:EF:FE:AD:0D:4B:0D:FE:E7:12:ED:89:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5f8813-e42b-308e-9245-8d9162b98fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7a:9f:d0:d6:6a:e2:ad:cf:1a:21:52:c5:e3:aa:0c:ef:af:
aa:8a:ab:f4:db:ab:98:32:3f:3f:50:c0:87:70:82:3a:50:5e:
24:c8:0b:ed:35:ce:d3:96:35:ec:28:54:36:85:71:97:3c:5d:
95:37:3a:07:b3:cf:11:53:3e:a9:72:d9:a0:07:be:73:6f:2a:
47:79:41:d6:bc:03:f4:a6:ea:60:23:dc:39:03:41:88:e0:f9:
a4:65:cb:2d:b9:74:c1:36:2e:5d:7a:e9:9c:2a:55:14:27:cc:
a0:cb:a2:18:40:4a:72:46:e7:b4:4c:84:74:65:13:ca:61:80:
c7:fb:63:a4:c5:81:58:a6:8d:a3:dd:06:2a:f4:b0:ef:69:f2:
59:f0:93:fb:05:40:68:73:e7:da:15:23:ca:fe:39:33:f9:b5:
fe:55:91:54:83:c3:62:23:80:47:2f:bf:ea:45:1f:10:f1:47:
78:3c:90:3f:3b:0b:87:9f:23:78:d6:60:17:55:ff:79:dd:25:
9f:23:c7:64:73:d6:a4:7f:25:07:38:5a:19:7b:2b:52:3f:b8:
27:55:2f:30:e2:9e:3b:0e:b3:02:f7:4c:e8:37:06:28:c0:71:
95:9c:ba:48:3a:12:75:23:dd:43:ea:18:74:f5:c9:be:4a:9f:
96:3a:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:57 2025 by rpki-client