Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035886c4-57d8-3ad6-883e-488434a19735.roa
File: 035886c4-57d8-3ad6-883e-488434a19735.roa (raw, json)
Hash identifier: 7N6tKRm1MLKmQ3A+/bW/e1ivkI9/HRQP53b0qG2sk7Y=
Subject key identifier: C7:6A:D6:69:E4:EF:50:74:60:BE:E0:B2:BE:35:9A:E8:84:BD:6D:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9F04BDCBD754F4B58AF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035886c4-57d8-3ad6-883e-488434a19735.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.59.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9f:04:bd:cb:d7:54:f4:b5:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=57300336-a8e8-424c-9719-05425e74d29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:81:64:22:26:a7:cf:fc:c7:fc:f3:84:a0:
b8:3e:b7:9f:e2:64:e9:38:aa:06:9c:33:0d:3a:2c:
4a:4a:c6:49:d5:24:61:bb:a2:33:b2:8f:fd:79:a1:
db:2b:52:a4:e8:fa:84:db:ca:4b:1e:5c:80:da:19:
34:0d:2a:06:0f:e5:fe:99:fc:15:14:3b:5f:26:ea:
40:5e:e0:70:f9:8a:82:ef:e5:41:13:df:5a:73:c8:
32:cd:cb:6a:00:19:56:a0:29:60:ec:d7:29:eb:20:
cb:3b:1c:d4:62:19:9d:70:bd:09:97:af:e8:c9:ec:
fd:a7:45:f4:81:7d:12:4b:e4:ac:b8:50:05:03:f8:
cf:18:c8:25:8d:32:ef:99:21:1f:85:33:7d:eb:95:
38:73:8e:30:d4:27:86:9a:ff:5a:8b:e5:c2:c2:3d:
3d:cb:3f:75:b6:9a:fb:5e:2f:42:64:2b:0d:0e:58:
f4:99:50:ca:d8:39:4c:5d:a4:dd:cc:05:3f:36:14:
47:b7:09:fb:db:12:ea:1f:43:6d:a6:e6:c2:49:39:
91:cc:3d:25:1d:66:1a:e6:83:95:5d:29:83:e4:b6:
ee:35:9c:cd:d2:a4:a1:7e:57:9b:53:ad:3c:f4:8a:
9e:d9:b9:0f:01:c1:4a:7f:b3:06:09:5a:13:ec:ab:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:D6:69:E4:EF:50:74:60:BE:E0:B2:BE:35:9A:E8:84:BD:6D:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035886c4-57d8-3ad6-883e-488434a19735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.59.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:45:a0:8f:a2:6f:5c:1c:0a:ed:02:a9:24:db:37:d8:e9:c6:
66:19:96:aa:ad:da:13:88:b6:83:27:93:28:28:8c:b3:12:a8:
4d:f5:88:f4:e7:aa:fe:92:78:71:f7:65:42:78:2e:9e:28:1a:
db:7e:b7:2c:89:e3:ad:08:bf:b9:d1:48:80:99:be:51:e6:36:
b4:96:6d:33:8d:54:9e:1b:b8:4d:73:57:f2:41:23:14:ea:c2:
68:37:bc:a7:a7:bc:41:e8:60:86:fc:63:23:eb:6a:fd:a3:d5:
d1:95:c1:be:00:b4:9e:d9:0f:11:5c:b7:db:2d:10:25:a5:a6:
a3:4b:19:22:c7:ba:b1:b4:1e:94:42:ab:73:60:6b:5f:97:17:
14:d0:8d:60:2f:06:99:70:b2:6f:5e:82:a9:95:24:8a:e2:97:
dd:81:55:48:4e:ba:7f:fe:72:9b:7b:c5:22:29:9d:3a:9a:26:
09:6f:0e:4b:cf:08:89:db:ee:d5:93:9e:9b:9f:90:a0:63:3a:
b2:41:4a:ab:5b:29:73:4f:2a:71:37:86:28:6c:02:5f:14:13:
1e:4c:3b:38:8a:f9:5d:f5:61:02:e7:9c:2d:c3:92:5f:2a:89:
55:40:bd:9e:b2:34:6b:6d:97:7f:08:81:6e:52:9e:9f:92:49:
a5:48:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:40 2025 by rpki-client