Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132a1c4a-3bf6-3bb6-b4d2-876b6760347b.roa
File: 132a1c4a-3bf6-3bb6-b4d2-876b6760347b.roa (raw, json)
Hash identifier: OH9EvAuVEi4uIqWTpRnDg8I5GqadQHdlZ2Tx2HJPY0I=
Subject key identifier: D0:F1:B4:E1:54:DE:89:0D:74:4C:BE:25:68:7F:00:AE:73:E9:5E:59
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AA01BEB1E872E70527C70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132a1c4a-3bf6-3bb6-b4d2-876b6760347b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.63.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:a0:1b:eb:1e:87:2e:70:52:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0425f8b5-3982-4a17-aaa9-4be44e894c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:ea:c8:50:72:c2:0a:76:db:c8:23:1d:f6:
4f:94:c9:49:3c:4c:63:a3:9d:26:19:da:57:97:a4:
bf:ac:39:1a:5d:0f:00:56:f3:36:0c:78:d3:4e:04:
24:f9:b5:16:be:57:60:50:d1:b4:ee:10:5b:a5:cf:
cd:4c:75:f3:af:60:30:d5:93:02:3c:97:d8:99:7a:
b0:1e:1c:f0:f7:af:bc:79:6b:8b:dc:55:23:cd:7a:
a6:e3:e2:a2:dc:f7:b2:16:dc:ef:42:31:c6:73:04:
b7:14:ff:d6:3a:9e:44:98:48:65:a4:9c:f9:76:69:
ac:cb:d1:05:3e:0d:f3:12:4f:43:ec:13:86:9e:11:
60:6e:84:8c:10:f1:16:87:a3:b4:2a:a0:22:9b:56:
fd:72:d0:21:bf:d0:83:f0:e8:d1:7c:93:a4:b4:e3:
f4:fe:3d:38:ab:fe:de:32:41:9d:76:1c:f2:b8:33:
64:47:24:46:b0:b9:e8:18:98:64:65:38:69:83:a7:
93:cb:1e:17:d9:ae:b5:29:95:c1:c4:9e:f0:f6:71:
4d:ba:a3:65:23:df:54:0c:37:b1:ab:7d:da:33:67:
2d:96:86:4b:f3:fb:4e:43:f7:05:78:95:41:32:bd:
ad:98:3a:ac:91:03:e5:e9:88:fa:ee:f2:db:7f:68:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:B4:E1:54:DE:89:0D:74:4C:BE:25:68:7F:00:AE:73:E9:5E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132a1c4a-3bf6-3bb6-b4d2-876b6760347b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.63.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:c8:df:cc:7a:1b:5b:77:1b:8e:e4:65:3c:b0:7d:6a:0f:18:
c1:12:06:5e:2f:9c:13:ab:d6:50:f3:fd:1b:c9:95:83:92:b6:
ee:a2:df:27:23:7b:78:32:df:b7:9e:bf:72:a1:f4:fd:a3:b0:
9e:d2:b3:6e:a8:c3:15:3d:8d:96:60:89:5a:c5:f1:00:be:36:
ed:93:60:bb:c9:be:85:f3:5b:0c:c0:91:3b:9c:3b:f0:f7:3e:
72:8b:51:57:05:7f:71:d8:2f:13:ea:31:7c:1b:97:ce:ea:e9:
7a:5b:b3:e6:7b:85:dc:67:8a:c1:e6:47:cb:f7:c8:6e:e2:99:
62:0d:35:7a:92:46:64:ec:71:e4:80:b5:a6:94:81:8b:e1:9f:
c2:eb:bd:52:9f:ea:5b:64:87:75:ce:5e:90:4d:ed:0c:a8:b9:
1b:66:17:46:15:0a:3e:ed:d3:3f:60:06:8d:94:ca:33:8d:27:
74:ff:dc:8c:34:71:53:8c:b0:f8:e1:cb:42:68:8a:d4:34:31:
aa:af:5b:4f:3b:aa:33:64:e8:6d:b0:9f:ba:cb:f3:e3:b8:b9:
c5:da:29:ab:99:ed:5e:33:71:08:94:b9:26:95:2e:13:fc:9e:
ea:dd:4a:8d:06:ca:a5:7a:a3:0d:e7:c5:20:87:39:d7:6d:5f:
c2:db:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:55 2025 by rpki-client