Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa
File: 6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa (raw, json)
Hash identifier: JC++PpqNfxpSznLV3JYCVkRDtAc5JQzH0JT1YciHKNA=
Subject key identifier: E8:AC:29:CC:20:F6:17:C1:EC:A8:22:81:52:89:26:E7:B0:CB:8C:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B75B229915AEE4529F180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.32.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:75:b2:29:91:5a:ee:45:29:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=0642ffa1-5746-4d69-b317-3e8e672228f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:97:71:48:59:5f:61:81:64:d5:76:c5:27:
83:44:a2:2e:0f:fa:e5:0d:cd:c7:49:5f:86:e9:25:
5c:ef:75:06:f2:81:1c:3f:46:fd:56:49:5c:5d:ed:
69:cd:ff:db:1c:6e:fb:95:a0:b1:37:ce:ff:c2:61:
0e:e0:48:e9:8a:bb:6e:da:8b:30:05:b6:6f:36:19:
c2:76:77:e7:3c:4b:cb:2d:0b:31:32:fb:77:c3:6a:
23:7b:e3:fe:f3:34:4b:c7:91:f9:47:27:de:c0:91:
56:3c:72:3c:a9:de:c4:9d:e0:1c:11:72:8c:8d:25:
8a:47:fe:84:7b:32:f3:7d:f6:82:b2:86:f4:41:b4:
68:ec:b9:26:e9:9d:d8:63:95:cc:ba:12:00:5b:57:
17:52:1b:1e:7f:77:84:7d:56:45:3d:81:2f:27:08:
d6:fa:41:aa:95:3a:94:ef:19:cf:06:7c:d1:05:74:
85:76:62:b2:ea:11:d4:b6:59:e3:46:ee:1a:fa:02:
91:2b:e9:58:35:03:55:50:97:82:71:f5:e3:1f:b1:
16:c3:44:3a:b0:e2:14:3f:09:eb:ab:53:73:39:11:
a9:a6:45:ce:09:b7:87:ce:1b:03:03:fe:59:d6:7e:
db:7b:b0:46:b6:02:81:35:02:61:f6:e4:b3:f5:2f:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:29:CC:20:F6:17:C1:EC:A8:22:81:52:89:26:E7:B0:CB:8C:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:81:2a:07:5d:18:70:9d:e4:e3:b8:fc:5c:38:42:c8:91:c2:
28:76:aa:27:79:7a:21:18:6c:eb:2f:7d:7b:05:2c:4b:b0:6c:
01:f1:b4:8e:60:6e:13:e7:f0:64:b3:68:6c:d3:fb:a3:41:7c:
ea:81:6e:0f:76:06:8a:bd:94:a5:ec:68:45:c2:52:93:cd:d2:
cb:3b:ae:41:50:2d:a9:ea:ed:a5:46:1a:85:15:86:8c:c0:0d:
22:51:94:d0:98:3e:40:b0:b0:d4:0f:5e:3f:cc:e0:41:61:b9:
2e:54:99:47:7d:d3:bf:44:1b:39:93:76:43:8c:31:a0:11:4c:
0c:25:61:a0:a3:69:01:e0:96:33:8e:b7:8f:53:09:3b:45:79:
02:26:40:88:0a:50:d3:86:a5:a7:04:24:2e:e8:de:42:13:4b:
5f:02:d4:43:19:68:a9:e2:11:ec:34:20:6a:4a:4b:4b:4a:ff:
a6:72:55:7b:c6:35:d3:fc:00:5d:6d:25:0b:5c:f9:d4:ea:66:
15:47:bf:e2:b7:f8:3d:f5:7d:3b:9b:80:b2:18:40:d9:21:7a:
19:1c:34:46:90:54:ea:c2:3c:71:da:a4:ec:18:dd:97:5a:5d:
1d:a8:7e:75:6c:f9:b6:41:d2:50:d4:90:6e:27:95:b6:78:f3:
2b:ea:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:02:59 2025 by rpki-client