Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/055f8225-0002-38b4-8786-2e565ce6f2a1.roa
File: 055f8225-0002-38b4-8786-2e565ce6f2a1.roa (raw, json)
Hash identifier: NrczCOojIcUtXyQCjR6uxcRYA/osqpTuZvjmjq8ymVE=
Subject key identifier: FE:54:AA:71:2D:FC:C6:8A:A6:5A:0C:9D:A2:9F:50:7F:38:73:74:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10BBDB51DBBAD55C4CF960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/055f8225-0002-38b4-8786-2e565ce6f2a1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 174.173.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:bb:db:51:db:ba:d5:5c:4c:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1d91e7cc-06ae-4932-b1ec-69a5d8f6b8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:01:51:b9:bb:0a:03:e3:3f:71:f3:cc:10:
ad:79:5b:ad:5d:c1:5a:e1:e1:2c:46:f8:2a:3a:8b:
0d:2e:26:69:5c:6d:e7:c4:80:c3:5b:b7:1e:89:30:
92:f6:d0:f6:42:d1:fd:90:36:38:54:47:13:c3:17:
01:37:55:9d:59:b4:01:2b:f0:86:a7:22:7c:e0:6d:
b0:fe:14:7e:d8:fb:dc:fc:a6:d6:31:30:11:8a:c5:
6b:39:2d:03:b1:41:c8:82:dc:c1:ea:1d:2c:4d:4a:
a7:81:d8:43:be:2a:97:cb:ad:ed:d1:90:e2:d5:4f:
42:d1:2d:92:1a:81:f9:d1:6b:72:64:fe:50:b1:9e:
ce:c4:e5:8f:89:d0:a7:e1:77:48:1c:c8:5c:98:48:
05:70:90:a3:76:29:fb:8c:79:79:5a:1a:6d:1c:f1:
aa:55:b8:71:6b:6d:34:d9:bc:96:7b:c7:ad:15:56:
28:9a:e2:cf:a9:c3:f3:93:ec:8b:1f:f5:58:a2:ce:
fa:5c:9f:ce:9f:63:72:2a:65:4d:85:89:da:d7:ca:
a0:2e:53:1c:55:c4:b9:81:96:40:14:fa:91:1f:fb:
dd:21:c8:79:4b:8b:3a:26:02:20:08:ab:03:26:95:
57:88:28:aa:86:d5:62:22:aa:4c:dd:08:1a:36:2f:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:AA:71:2D:FC:C6:8A:A6:5A:0C:9D:A2:9F:50:7F:38:73:74:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/055f8225-0002-38b4-8786-2e565ce6f2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:47:12:a8:44:18:d5:54:d8:b5:1c:9b:14:a1:3a:e8:48:65:
e1:01:1f:3b:79:61:94:2e:bf:69:2a:8a:46:1c:af:f2:97:51:
a3:2d:ec:d3:93:6e:62:4f:16:f3:3a:5f:a7:99:2d:7c:db:67:
00:74:f1:b2:a2:54:64:d6:ae:4e:1c:d4:df:18:bf:75:7a:9c:
c2:2c:3d:c6:d7:42:73:82:fb:a0:a7:c9:1d:78:9c:b5:11:86:
62:61:20:1b:1f:1a:eb:a8:cf:0b:42:f0:7c:66:d4:4b:f2:74:
18:84:b9:1c:24:46:3c:3b:f5:97:d9:e4:f2:43:d5:95:37:f4:
7b:e9:1d:6f:6e:05:8b:87:b7:c4:37:f9:7d:b2:f0:f6:40:6c:
a0:79:08:98:94:05:ad:6e:10:c2:9e:40:3b:21:19:9c:c5:b7:
c0:a9:eb:d9:77:29:3c:ec:bd:05:96:32:17:f4:fa:f1:54:8e:
d0:9a:8c:3e:c7:05:e0:52:13:b7:e7:5c:2a:55:96:57:d8:d6:
ad:ef:d6:0b:db:44:b6:3f:97:09:26:d2:2f:db:b6:62:b2:a9:
02:a5:bb:04:50:e9:08:0d:19:bf:e7:94:54:e3:ae:f5:67:b4:
af:81:67:31:c9:9f:db:98:0c:60:a5:03:f2:f1:98:58:35:73:
33:41:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:29 2025 by rpki-client