Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9537723-46c4-344d-812b-c4a0a74d438c.roa
File: c9537723-46c4-344d-812b-c4a0a74d438c.roa (raw, json)
Hash identifier: G+J/e8JN4iZMe9vivpwunKSwaBu8FoZHuLtGH4kMfOw=
Subject key identifier: E2:9F:12:B8:49:13:CB:EB:6F:4E:22:69:33:65:8C:16:B3:E4:49:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DDDDB7EE65A6C80215080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9537723-46c4-344d-812b-c4a0a74d438c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 68.86.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:dd:db:7e:e6:5a:6c:80:21:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=484cd187-61ea-46e8-b06f-bd64e4a8280d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:40:d8:69:bc:f0:a9:7e:7e:bf:ab:d6:c1:
a7:68:90:5a:38:90:d3:5c:f0:28:3d:92:72:dc:f4:
0a:4f:2b:b4:9c:e5:ac:bd:16:fb:ea:6c:14:95:20:
63:f9:b3:09:d6:37:6a:a0:81:49:07:b3:23:08:0a:
bd:9c:e3:ba:72:5e:27:43:00:55:d4:57:35:4a:12:
e1:50:6c:f2:1b:79:b4:85:79:28:62:c4:e7:b4:ae:
a5:df:29:43:3d:89:08:5b:dd:32:34:47:28:20:10:
3a:6b:1c:66:ae:af:06:32:8a:fb:ef:aa:4c:e8:42:
3d:3d:1b:f7:e4:28:b1:c3:23:b1:1d:ad:6e:bd:d8:
d8:06:5c:08:e7:a2:4d:01:1e:2b:6a:45:26:f1:bc:
9e:5a:ce:a8:78:ab:06:0f:94:1f:1a:f8:02:4c:29:
72:5a:77:c7:ff:e0:21:7f:4a:e6:d9:a8:09:40:cc:
64:7e:e9:cd:7d:cd:b5:03:9e:23:b8:c6:b3:70:ca:
73:61:c3:de:59:8c:ab:94:3a:25:bd:d5:3d:fa:57:
9a:57:37:5b:01:cc:76:c3:5e:c4:f3:36:3e:a2:6c:
67:7c:fe:95:e4:9b:47:99:ba:64:e5:0f:ab:c9:1f:
c1:6b:35:77:bb:fe:58:79:e3:22:d9:90:83:ad:13:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:12:B8:49:13:CB:EB:6F:4E:22:69:33:65:8C:16:B3:E4:49:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9537723-46c4-344d-812b-c4a0a74d438c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:54:c5:be:05:e9:23:48:2b:08:80:f0:0d:a8:ff:11:46:68:
b8:dd:87:8b:ef:5a:66:97:11:d6:be:4b:6e:76:b1:79:14:85:
47:6d:60:45:38:50:64:91:cb:e3:9a:bb:3e:0a:b8:dd:8f:af:
ab:74:b6:97:06:35:13:a7:a4:6d:21:1b:8f:c0:ce:73:19:25:
7b:d5:97:7f:12:18:4b:1c:2f:a3:55:0b:dd:78:19:f3:01:69:
32:b2:80:72:30:89:eb:62:fe:26:85:12:67:a0:44:da:5c:15:
4d:30:4e:fa:b7:cf:2a:0a:19:12:73:83:06:f7:35:24:4a:5e:
ad:06:f4:c9:40:50:55:de:57:0f:13:02:e5:0c:7c:30:9d:be:
4a:12:f2:7f:c0:4d:80:e5:98:f1:95:f3:0e:0f:60:de:13:a4:
c8:ff:e0:8e:1f:8b:9e:4b:c7:bf:2d:c6:d0:81:47:b3:3e:80:
51:2a:6e:8f:36:78:f8:d1:6f:cd:c5:64:0c:65:32:61:4e:78:
60:e3:1c:45:6b:37:73:d8:01:93:6d:c5:44:10:e8:94:4b:72:
44:52:66:7d:7b:1c:02:22:ca:5c:6d:56:3b:1d:6f:be:39:b4:
8a:d6:cd:c9:50:0b:e2:21:51:65:37:d9:05:0d:45:a0:45:1f:
08:46:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:00 2025 by rpki-client