Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa
File: 0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa (raw, json)
Hash identifier: IaFiB+/LUTTyTvRo+bGcoQ0XvfLu6QkUqcN/ZwAiGBA=
Subject key identifier: 60:87:6F:85:FF:7D:BA:95:C0:C6:EF:B0:90:95:BE:BB:7B:B3:51:C1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9C249998A43065BAB100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.237.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9c:24:99:98:a4:30:65:ba:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4ccfd867-87da-472a-93af-699e70feabfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:71:df:03:79:12:9a:2e:9a:08:d5:8e:d8:
c9:81:1f:a3:ad:2b:55:a5:fd:ff:5b:fc:80:d3:1d:
12:37:2b:68:21:17:92:e7:a8:cf:05:b7:fd:e3:2e:
5d:34:87:86:c4:67:ab:d1:a6:6f:b9:27:51:5f:aa:
a6:46:53:0d:70:cb:54:16:77:ed:a8:91:85:a6:b9:
e5:e6:17:e3:33:9e:b3:52:da:1c:47:0d:ce:ea:83:
10:35:5b:98:26:db:80:60:7f:83:82:15:52:8c:2d:
a2:5f:38:27:44:62:47:33:f3:42:54:09:23:dd:3f:
4a:69:ca:56:dd:4a:d4:d8:88:9f:cd:6b:8e:04:fb:
01:c1:7a:82:bd:de:7a:89:0c:f1:8f:c3:08:33:90:
7d:f6:ce:a9:54:f1:cc:bb:23:5e:fa:94:05:f8:76:
4d:67:d2:74:5c:0f:63:1f:06:0a:25:07:cb:8d:28:
89:3b:a3:8e:65:df:5b:7c:93:81:9a:65:75:2f:eb:
dc:81:67:6d:1a:66:b1:c2:d6:05:41:67:12:65:04:
53:95:4d:99:dc:1f:a8:ac:b9:21:de:af:eb:64:ab:
bc:52:6b:7b:ad:7f:75:f3:5f:3f:01:cd:87:20:27:
2e:6c:4c:95:13:c9:d4:78:ac:b8:1f:3a:2f:b7:10:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:6F:85:FF:7D:BA:95:C0:C6:EF:B0:90:95:BE:BB:7B:B3:51:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.237.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5f:61:ae:c9:d7:a4:9a:c1:d4:5b:a7:a2:90:1b:17:ff:18:
2a:e0:72:32:ce:0d:1e:cf:17:d9:61:b6:61:78:76:14:ff:15:
cf:f4:6a:1d:1d:a2:f5:6c:c6:d8:0b:17:7f:1d:18:3a:01:c5:
1d:65:88:a7:df:bc:9f:af:1c:d1:69:cf:04:aa:ab:96:76:5d:
17:b3:fe:33:c5:c4:23:18:8f:84:dc:af:29:ad:4c:47:52:80:
ce:56:2b:32:cd:cc:5d:4a:5d:4c:b4:83:87:26:01:cf:c9:f5:
cd:8b:a9:4d:ab:c5:20:d4:70:97:4e:b6:b1:ef:21:02:de:ac:
d6:74:2f:c6:94:1f:95:e2:ee:0f:9c:f9:b2:1e:60:4e:a0:b1:
b8:af:e8:75:bd:45:38:eb:15:5e:bc:50:2e:91:d9:dd:2f:60:
05:13:d6:bd:09:4d:e9:84:b5:d9:40:a5:df:a1:35:2b:05:7c:
f9:d2:f6:08:18:67:0c:03:ff:6c:6d:64:ea:87:39:57:ba:6d:
06:bd:c8:29:9d:7a:39:ab:81:4c:84:a3:5c:89:c9:58:75:34:
67:21:4a:69:69:4b:a3:03:22:b9:6e:25:60:8c:37:fb:84:e9:
d9:9e:e4:3a:fd:21:c2:ad:eb:c6:c9:bf:d5:2f:ae:d1:10:c9:
cf:f0:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:51 2025 by rpki-client