Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd35297-5741-3af7-b5a9-9cf517a95335.roa
File: dcd35297-5741-3af7-b5a9-9cf517a95335.roa (raw, json)
Hash identifier: DRMo3Z6BznI36x2ZSkx3ZbpgAquswdzJNsN0KMPJtLI=
Subject key identifier: FB:A8:FF:BC:87:98:12:C3:01:68:33:E2:F3:52:A5:19:AC:44:4D:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF41D1BC1E8C89F7B48AB6
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd35297-5741-3af7-b5a9-9cf517a95335.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.38.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:41:d1:bc:1e:8c:89:f7:b4:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=096ece80-c503-4fed-8337-0ec3b6442a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:12:e9:09:bf:25:d4:8a:16:c6:90:85:cc:
1f:61:c8:48:3e:08:d0:54:96:9c:d3:fb:3d:db:6e:
0d:5a:aa:b5:d1:7e:76:d5:93:d8:26:b1:09:9e:2a:
28:22:cc:07:ff:4b:43:58:cd:52:6c:b9:54:bf:0c:
46:f4:68:f0:5a:22:62:b8:f6:a6:ac:b5:54:29:32:
42:27:5e:b7:f7:a6:9b:2d:7b:76:c7:3f:a4:6e:e1:
02:2c:6e:4a:18:93:7b:e0:8b:92:71:0b:e9:9b:1e:
30:4f:58:da:b6:80:33:03:74:a0:f0:2b:b8:e4:ae:
18:5d:10:a7:83:9a:69:ee:cb:a4:b9:94:12:18:43:
5e:9a:72:a9:02:07:60:66:5a:f1:e8:cf:17:5f:44:
61:bb:ae:f7:5b:ce:0e:31:dc:98:c3:7c:97:bd:f2:
23:fc:7a:11:f8:9c:d0:53:3a:2c:71:ba:ba:6a:06:
38:fa:0c:c4:0a:73:cf:29:e8:dd:cf:5e:d8:de:ed:
f1:50:73:7b:02:86:b8:74:1a:a2:97:80:f6:21:46:
6c:49:08:5d:3f:48:f7:b5:0d:85:9a:14:d2:46:13:
9c:57:85:3b:55:4c:5b:01:49:c7:f5:25:2e:be:6e:
1b:86:32:6a:e6:1d:30:1a:b5:3b:b7:38:6f:4a:73:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:FF:BC:87:98:12:C3:01:68:33:E2:F3:52:A5:19:AC:44:4D:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd35297-5741-3af7-b5a9-9cf517a95335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f9:b1:bb:ba:13:6c:ad:10:06:d7:01:f2:ea:21:a7:87:7d:
87:8c:de:ec:51:a8:00:5d:f4:5e:ca:09:99:c2:e5:7d:c3:ea:
39:76:01:3a:c3:13:ad:8a:13:90:89:66:be:3a:a9:86:34:53:
75:43:e1:12:c7:e5:49:a5:04:d2:78:01:a2:fb:5e:bc:40:15:
cd:fa:56:49:e8:e7:e8:7d:c7:62:17:fe:18:16:f4:44:8c:4a:
bd:fb:bc:28:d3:1c:ec:5b:bd:94:21:36:50:69:e0:d6:37:c0:
45:4c:01:b9:5c:37:45:8d:cc:38:11:ab:99:f1:2b:66:a0:ab:
58:d8:05:66:b9:12:d4:d1:b2:ed:ca:e3:e5:c9:cc:ca:db:82:
6a:6c:44:db:a5:16:9f:85:93:a3:85:b0:a4:87:e2:d3:26:50:
2b:2d:c6:5c:7a:c5:5d:fd:8a:8a:f9:9e:83:cf:5d:b2:9f:3e:
83:f8:1c:a9:a3:b4:5e:03:ec:38:14:0d:f9:66:6a:2b:b6:d5:
8c:b9:d4:42:2f:cc:56:f3:c4:56:27:0c:6c:56:03:46:a8:3f:
0b:a9:a2:50:5c:84:6e:ee:e8:88:3e:12:c1:af:75:ed:91:e2:
e6:d2:98:f1:cf:d2:e7:bf:58:48:13:75:6f:9f:67:b7:97:40:
3e:8c:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:11:51 2025 by rpki-client