Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0f6c19-1de2-3497-9efc-0625fa466343.roa
File: 7e0f6c19-1de2-3497-9efc-0625fa466343.roa (raw, json)
Hash identifier: +YHMwnzRvG9I8X46V563rhka2Xb+vJWzz94c9OmytE8=
Subject key identifier: 00:F9:85:20:D4:32:9D:5B:3D:C1:31:70:84:82:61:2F:73:70:9B:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8DE53A427191DD7109140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0f6c19-1de2-3497-9efc-0625fa466343.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.37.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:de:53:a4:27:19:1d:d7:10:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=34af964d-3062-4127-9985-c29487e4c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:62:31:aa:66:80:30:87:d1:d8:e3:eb:40:
62:71:be:68:bf:f2:88:72:36:f6:d6:c8:3c:0b:40:
d2:7f:ef:2e:ed:d1:db:ab:87:e9:e3:71:36:01:55:
22:49:0e:0c:7c:4d:09:83:5e:8a:0f:a3:a8:52:1a:
78:25:bd:ad:b0:f8:d7:90:ea:7c:97:13:0f:3f:03:
be:0b:9a:0c:60:ca:1e:75:eb:60:ee:dd:8a:c2:77:
bd:ff:41:2e:b5:ae:37:a7:6a:4b:a4:f3:d4:a8:f6:
12:0d:31:dd:e4:c5:21:2f:4d:ef:4a:74:b9:f8:40:
1a:80:3a:4b:c8:16:8c:21:5b:7d:46:cf:1e:e4:20:
9f:1b:f7:64:05:de:69:6d:c7:36:ff:65:36:91:6e:
a8:4d:98:40:b1:88:af:0a:3d:6a:0c:4e:0d:34:20:
cf:b2:cd:c4:6e:83:c0:e3:28:2c:32:ed:a1:3d:37:
92:98:09:ad:6d:3c:06:a7:ac:07:d3:41:8b:9e:ae:
6f:10:54:4a:f3:ca:28:d8:a0:6f:69:bd:fd:d6:31:
e6:ef:0c:3e:8e:56:26:be:34:77:40:0c:3e:f4:24:
b2:c8:a9:11:1e:55:13:60:e7:ec:b8:32:94:c4:75:
c2:6f:38:7e:b7:75:29:56:40:68:8e:d7:9a:83:36:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:85:20:D4:32:9D:5B:3D:C1:31:70:84:82:61:2F:73:70:9B:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0f6c19-1de2-3497-9efc-0625fa466343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8e:2a:ed:b4:84:b0:0a:31:4e:c0:4e:51:71:50:62:87:c5:
28:64:23:ed:f1:b1:be:09:ca:f3:5b:4f:2b:b5:a8:65:42:d4:
71:70:d5:fe:7b:e6:ad:29:c6:ef:d0:17:ea:a2:b0:f6:76:09:
c4:69:32:87:d4:a1:75:29:a7:91:63:28:4e:ed:49:ad:e2:98:
8d:4f:d9:76:4d:10:7d:cd:d7:7f:ef:eb:1c:d1:8d:6e:cb:57:
e4:c0:1e:cc:5b:99:47:b9:fc:fa:d2:4f:f3:1e:62:80:fe:e1:
29:2a:c4:2d:55:0b:af:a8:5a:9b:0d:4d:f0:89:00:12:b0:03:
a2:4d:fa:46:a1:79:33:81:02:ac:70:fa:34:ed:4e:f0:72:bc:
31:ba:6a:96:27:55:c1:12:e2:8a:f7:b9:eb:90:06:51:9c:09:
ca:e9:89:ee:15:cd:40:4c:96:03:49:03:fd:8b:2a:b9:77:9b:
a6:71:18:9e:d2:d5:72:a9:9b:5e:8d:17:d6:d9:a7:f1:17:81:
e4:f3:1e:3d:99:1a:f6:e7:75:11:0f:5d:a1:9e:c6:d7:80:d5:
a2:4f:75:22:5c:39:35:6a:a3:43:e9:a5:ce:09:2d:01:37:33:
7c:56:e4:06:de:f1:d1:37:2b:56:87:9e:cf:6f:54:31:5f:82:
82:25:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:44 2025 by rpki-client