Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa
File: 65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa (raw, json)
Hash identifier: 7IGAASaOlfVFKmHxxc/Cuj3b+qruunUykxoO0IbwZn4=
Subject key identifier: 3A:C1:85:8F:07:A7:18:9C:EA:FB:16:F0:B4:D4:40:F9:E6:51:44:05
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B76181CC148F49C503600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.32.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:76:18:1c:c1:48:f4:9c:50:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=546d0d03-1be6-4de5-8017-e5fc354ca246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:8b:61:fe:69:3c:d2:e4:e9:b9:fd:8c:45:
83:1f:fb:aa:5a:3a:de:c4:79:de:a2:fc:b0:22:c5:
28:2d:9d:14:ab:06:7d:18:f8:c8:2c:3d:16:fb:8a:
bd:ee:a1:0b:2a:75:9d:a3:dc:ff:04:69:70:8f:89:
8d:fa:a0:f9:1b:cf:8d:f7:29:ba:bf:b4:65:2b:d9:
01:6f:39:03:ac:8e:eb:8d:6e:bc:c0:ab:7d:d3:db:
15:56:b7:7d:b1:a3:dc:92:03:ee:df:a1:a1:19:78:
35:21:c3:5c:24:86:52:e8:4c:92:40:93:f0:56:76:
8c:27:9b:21:ca:51:1f:0e:b8:40:d9:fe:20:ad:2b:
49:c0:2c:80:19:5e:d0:19:40:ee:60:b3:4b:42:93:
26:dd:ea:95:29:ae:18:42:f6:5b:c8:45:0b:5a:68:
89:1b:02:6a:88:f4:bb:15:d6:ba:75:fc:d2:eb:3a:
36:c1:a6:b8:56:9d:eb:47:44:e9:d3:c9:9c:1c:92:
70:29:f5:25:76:0c:9a:71:78:a3:73:16:cc:28:b1:
b0:6a:04:b1:32:b0:1f:3a:81:06:cb:11:d9:f9:fa:
cb:a6:49:65:84:ac:eb:5d:d7:81:99:4d:58:ab:da:
c7:0f:25:e7:76:b1:78:ad:3b:7f:78:38:8e:ec:b4:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:85:8F:07:A7:18:9C:EA:FB:16:F0:B4:D4:40:F9:E6:51:44:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:e1:3b:00:c0:7a:f5:ee:b3:65:bb:c4:2f:dd:2d:28:1b:1e:
51:7b:fc:d1:6f:c9:d9:f9:ed:0c:86:ab:e7:a9:4c:f4:78:de:
b2:ce:0d:fe:73:89:45:6c:c2:80:73:c9:fc:f4:79:99:b7:fa:
25:a9:88:be:28:4c:c5:4f:fa:a0:52:69:e6:98:54:57:21:eb:
a5:7a:3d:b1:1d:d7:3f:ef:7b:65:06:4e:27:12:a0:ed:13:3e:
8b:5f:c1:e2:53:fb:e5:1a:16:04:28:86:b5:36:b3:79:37:30:
11:6f:d7:5e:a0:95:17:3f:43:80:26:e2:0b:60:dc:87:4c:dd:
6e:db:e5:ee:a5:17:aa:ab:eb:b6:a3:1c:41:3d:de:1f:e1:79:
8a:54:ff:d6:e6:80:e9:f1:5d:c2:13:6c:ac:af:1f:57:42:e6:
0a:2d:c3:d5:a6:73:9f:f0:dc:93:ca:8c:30:b0:bd:07:7b:e8:
76:b4:3d:ca:3c:59:f8:a4:13:85:fb:d2:68:72:9d:c3:c4:08:
d4:09:b5:06:83:4f:ab:03:f2:90:a9:f6:03:b3:f5:71:79:bf:
8c:6a:02:85:0b:4f:ee:33:cc:f6:ac:c0:38:a4:2b:0d:fe:4f:
b7:03:d4:7a:41:14:67:d8:cb:41:bf:1a:e0:6a:1c:43:dd:06:
92:b6:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:31 2025 by rpki-client