Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea70d333-1416-3593-8532-6cc6629cb060.roa
File: ea70d333-1416-3593-8532-6cc6629cb060.roa (raw, json)
Hash identifier: X8uMg6Bv7jbx2j5pP3fGlcMEHymPKAezH+rFCd0lEBk=
Subject key identifier: 5B:72:74:8C:FF:12:28:ED:78:7B:3D:2F:A5:D8:91:60:6B:64:17:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F784A2C1A6034349A10B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea70d333-1416-3593-8532-6cc6629cb060.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.36.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:84:a2:c1:a6:03:43:49:a1:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=437ed042-e4b4-4eb5-9c1b-8d004644dd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:79:79:c8:d1:31:2c:10:23:76:bf:3b:7f:
b8:4c:0a:b4:5b:1a:0d:c8:9a:55:0b:a4:67:c8:f9:
23:fb:e1:08:9a:36:de:4a:fa:75:c8:fc:7f:fb:2c:
39:c7:9b:51:15:f6:bf:89:2d:fe:f9:80:1f:e5:26:
78:96:bb:04:4a:7f:65:d4:a2:67:2f:cf:5f:31:13:
87:ea:96:4c:3a:c9:48:3a:7c:88:c8:78:7a:fe:a3:
8a:60:ca:a6:4a:a6:99:94:f1:d7:13:37:44:0b:22:
e4:9b:a9:e4:c3:f2:0c:fa:24:d5:ac:9c:bd:2e:78:
fa:27:dc:b9:e9:66:89:0d:a3:65:b5:23:26:e1:0d:
0a:20:32:c7:cb:8c:bd:68:04:fb:98:e2:5b:2f:94:
db:40:b4:cb:1d:8d:5a:c1:71:80:d2:01:67:83:58:
c8:3e:79:10:58:d7:9c:72:9e:01:cf:0b:0b:6d:7c:
ed:c1:0f:10:c3:4c:04:a0:c2:cc:5b:bf:9b:f1:43:
b0:44:d4:5b:e9:14:f9:50:5d:f1:48:a5:d3:82:00:
10:e7:66:68:75:86:32:d0:62:73:6b:63:13:1f:e9:
92:0d:70:b0:d2:8d:30:9b:a2:ea:9b:1d:9e:c4:e5:
f2:19:22:34:7f:e8:a3:58:01:39:26:2f:09:e5:d9:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:72:74:8C:FF:12:28:ED:78:7B:3D:2F:A5:D8:91:60:6B:64:17:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea70d333-1416-3593-8532-6cc6629cb060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:15:2f:56:d4:be:08:4f:48:5f:35:14:fd:34:32:a0:47:36:
e7:c8:a6:a5:72:26:c8:54:6e:c4:d0:19:ce:19:b4:45:64:4d:
10:4a:21:55:e3:67:6b:fa:29:a0:94:bc:91:d5:b5:fd:96:ea:
29:7f:91:83:69:b4:31:10:76:30:ec:a4:d5:ae:be:17:87:46:
02:6d:80:27:ab:8d:fc:d6:78:8e:20:58:d6:02:5a:20:79:f9:
d8:dc:ec:f5:6a:02:df:5f:7d:a0:7c:f1:14:12:e1:1d:79:11:
53:da:0f:22:6c:18:d9:b3:0b:f8:52:e7:d1:9a:96:4b:40:49:
be:60:bd:06:ab:2d:d2:d8:65:74:1f:d5:80:8a:8e:f8:2b:92:
b8:8e:1f:a1:f3:d9:1a:6d:c5:a2:11:0c:80:eb:fe:91:78:ec:
33:12:10:04:07:f5:c4:51:78:fa:15:ed:60:77:78:26:9c:1f:
46:ea:a9:30:86:3b:93:82:20:0f:1a:3a:36:64:88:1b:52:1a:
09:c5:8e:8e:4c:80:ed:06:3c:c7:03:14:95:28:ea:9a:2d:f4:
46:10:b6:83:c9:02:9f:23:ac:db:5e:ce:12:66:32:63:73:c5:
32:23:79:d0:19:c5:92:f4:43:63:ed:83:2b:d2:6d:1c:53:ab:
3d:02:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:17 2025 by rpki-client