Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0650e87d-a3ec-3d2f-aebe-d1e161bd1b80.roa
File: 0650e87d-a3ec-3d2f-aebe-d1e161bd1b80.roa (raw, json)
Hash identifier: /6wThJcQUVk5lbQ/aFi4BucOTbvqG6SOAzD8B/a91dE=
Subject key identifier: BE:06:2A:9E:2E:E3:FB:27:A5:5A:ED:6C:23:9B:75:92:43:73:A5:85
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C118835277D636DA6B97980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0650e87d-a3ec-3d2f-aebe-d1e161bd1b80.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 71.198.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:88:35:27:7d:63:6d:a6:b9:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e67a0c88-5f13-4a87-b08d-e994a1d33ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:53:33:d4:95:04:43:ea:34:73:45:71:1a:89:
4d:17:93:d7:fa:42:57:37:61:d5:9c:aa:83:12:c6:
d9:8b:43:af:39:95:92:1f:19:b2:1a:8f:05:a3:ec:
c6:bb:95:d8:da:43:07:2d:c6:b1:b0:f2:7c:29:75:
9e:7f:1e:8d:2c:54:8c:55:a0:6a:e2:8d:9e:4e:59:
b8:81:ad:6d:d1:42:48:9d:4f:e5:59:fc:e1:47:47:
07:50:d1:1a:23:fc:1c:88:42:a0:59:21:f0:eb:b7:
9e:bd:28:c5:0c:5a:6b:55:66:87:43:8f:34:8c:ea:
dd:a1:f3:9a:63:bd:3d:9b:30:c7:50:63:d5:b4:a3:
2f:9f:e3:bd:4d:e9:26:87:04:27:ee:73:1e:90:4c:
f4:46:84:64:79:06:86:68:7a:82:10:47:04:26:f3:
55:3d:51:2b:2a:33:2b:5d:e1:1d:3b:ff:56:85:02:
cf:ab:0a:c1:e8:19:d4:3b:1a:17:c1:55:cf:63:50:
95:e8:c3:16:fc:dd:ba:7d:8f:f0:8c:e1:7d:6e:e5:
84:be:22:00:e1:9c:5f:7f:11:75:18:8f:da:15:1d:
df:8b:56:bf:2c:81:d9:9f:38:75:05:3b:31:4f:c5:
7e:63:47:aa:8d:27:6b:3a:48:98:61:7f:1a:05:c2:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:2A:9E:2E:E3:FB:27:A5:5A:ED:6C:23:9B:75:92:43:73:A5:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0650e87d-a3ec-3d2f-aebe-d1e161bd1b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:26:f1:50:08:88:4c:dc:ae:9d:a5:47:f0:b9:03:c2:5d:f3:
12:51:d7:4c:7f:42:58:f5:5e:0c:89:93:07:79:a2:20:10:ca:
46:a6:76:7a:03:90:ec:93:11:4b:55:e5:6b:a1:3d:c3:fe:5a:
ad:9f:6d:cf:4b:67:f8:7e:3f:a8:1e:8a:2e:76:56:7f:e4:1e:
3e:14:47:b2:50:a6:90:7e:d1:13:fb:cc:05:90:62:49:7f:f3:
6a:c9:e9:7c:ea:91:a0:a7:16:00:bb:26:e1:2d:e8:70:59:cb:
c2:8c:08:9b:a5:3e:17:53:fb:96:3c:e6:36:f9:8d:f0:95:82:
54:d0:e4:6b:0d:9f:ab:6a:36:6a:43:ad:6e:06:83:cd:9c:a5:
e7:c2:ed:b3:a6:46:e3:23:c4:2a:58:2b:3f:fb:b4:75:67:55:
e9:3a:4e:fa:8a:fe:8c:f8:b5:50:ad:f9:6b:28:c7:9a:de:b2:
6c:ec:8d:74:19:8c:13:0b:3e:fc:b8:d8:5b:e6:31:c8:68:0d:
37:51:b1:fc:36:33:9a:6c:cf:5b:34:58:1c:21:6c:b3:f4:c8:
af:4d:67:c8:52:5f:42:93:ea:82:db:ad:c5:fd:a0:64:51:eb:
33:79:4a:c0:3f:a9:be:a9:3c:37:d4:ac:be:5a:6b:e0:06:ef:
58:6b:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:15 2025 by rpki-client