Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/030c9f5a-e1b0-300a-a87e-b5e689b0e3df.roa
File: 030c9f5a-e1b0-300a-a87e-b5e689b0e3df.roa (raw, json)
Hash identifier: M0mr5p38j8d/KafyrP+rqWUpsjMfNlgAaJ7f5gx2UeU=
Subject key identifier: E1:42:FD:A7:C0:78:B2:31:9C:12:BD:CF:0A:7E:F8:31:EF:C6:21:11
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128FC7F39FC39959A39640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/030c9f5a-e1b0-300a-a87e-b5e689b0e3df.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.228.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:8f:c7:f3:9f:c3:99:59:a3:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4b4a5588-5a0a-4664-9a60-5c672040cb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:eb:ec:de:c4:76:13:fd:78:79:7c:99:67:
27:e2:8e:e2:b9:c4:54:73:f3:62:7d:48:45:84:4e:
cd:c6:77:ff:0e:7f:fe:b9:88:12:c1:9b:29:e9:d8:
f8:f3:3f:43:c9:29:4f:3a:0b:0a:3c:84:aa:72:7a:
c0:c4:d4:94:31:9c:f3:aa:f5:da:ac:d3:54:ae:bb:
b9:b1:9d:ea:08:55:ac:02:f1:4f:cc:f3:3f:b7:e3:
70:63:9d:86:84:65:55:ba:56:d1:c9:6a:66:b2:77:
66:57:13:27:a5:e4:8b:75:4d:cd:e2:b7:1e:f5:ba:
17:8d:e2:82:aa:70:54:63:f6:24:d1:a1:bf:ac:06:
ab:fe:df:2a:18:a5:16:f0:56:3d:67:b1:57:25:46:
c1:26:64:09:43:a3:ee:69:7b:24:ec:c9:8f:35:8f:
67:76:e9:f8:e7:71:d4:73:64:0f:9b:c1:99:ec:84:
06:87:3c:66:c9:80:36:c9:ac:c0:d7:4f:6c:ac:1c:
21:92:4c:b0:66:df:99:34:4a:83:78:ae:d1:39:22:
18:dd:f6:ff:4f:49:74:83:ca:50:be:5d:73:33:1a:
d5:7d:5e:d6:2b:67:36:46:4a:94:7c:79:24:cb:63:
d5:94:fc:a6:18:86:79:68:4d:95:18:a0:08:85:3d:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:FD:A7:C0:78:B2:31:9C:12:BD:CF:0A:7E:F8:31:EF:C6:21:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/030c9f5a-e1b0-300a-a87e-b5e689b0e3df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.228.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:0d:fc:14:1d:9f:4f:69:40:9e:b8:f3:38:c0:20:d1:b8:64:
0f:2b:51:1b:7c:01:9c:fe:0a:5e:5f:27:78:b9:d4:c4:9d:1f:
e0:80:36:00:1a:0b:16:65:8e:1f:b9:d5:c2:52:11:c4:81:43:
bb:c4:72:6f:76:19:02:4f:28:39:6e:a6:38:f3:16:47:5f:26:
75:df:b3:4d:07:36:6e:23:c1:eb:36:fa:99:5d:b5:2e:cb:8b:
dd:15:74:9d:42:e1:2e:de:90:fa:b8:dd:71:49:ad:26:f3:f3:
ed:27:fc:66:0e:36:a8:0a:47:0f:dd:a1:d8:fb:b4:56:ac:8a:
b5:ac:65:fe:16:f0:e5:d2:af:24:c3:33:91:4e:ae:08:e4:f0:
cf:73:76:73:22:81:d1:64:b1:bf:b8:43:5e:e5:7a:bb:e4:b3:
ab:21:5b:6f:86:2d:10:30:2e:dc:48:cb:63:00:e9:43:62:27:
0c:80:45:ab:39:0f:87:f7:3c:0f:c6:14:53:92:ae:60:ef:7a:
6b:d4:51:50:d1:d9:9b:20:c3:ed:1b:c1:4f:50:62:67:7d:44:
b8:5e:95:ed:b4:c4:69:df:2b:d1:ea:43:6e:b4:09:9a:d6:bf:
03:f2:3e:94:fd:d8:1b:88:8e:32:c2:70:d3:c4:64:e8:10:78:
20:16:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:29 2025 by rpki-client