Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa
File: 13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa (raw, json)
Hash identifier: RST3F0e5a5ph0mje2PSaSNjbgGCor7Z/MDkjhlzxLRk=
Subject key identifier: 64:E0:3B:9B:E3:FA:35:4B:41:65:E8:EF:E1:71:B0:BB:4D:15:B9:BE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A96B13BAB2CFDC2B8F200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.189.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:96:b1:3b:ab:2c:fd:c2:b8:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0035d1df-67b9-4b49-8159-82aa9ff81701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:4f:35:ec:02:6d:9c:0b:02:9e:0b:ac:6b:
42:5d:74:21:51:da:7d:8d:86:b2:2b:d9:6b:ef:3e:
ce:35:5a:6e:f0:7e:c5:f3:25:5c:61:30:b8:4a:dd:
f2:56:b2:7d:ad:8d:1a:ac:23:87:61:5f:a1:34:84:
e6:96:9a:b7:48:c3:89:54:37:7a:42:0e:e9:61:9a:
7d:c2:2e:cd:82:10:71:0e:98:a6:ed:d3:1e:9f:53:
6f:a9:7a:f1:f6:b6:30:6b:b5:28:c1:79:f5:5d:f3:
43:b5:32:0b:7c:53:14:49:81:12:6f:57:77:fa:19:
a9:e1:5d:7f:c3:72:f7:9a:fd:f9:b5:5e:fe:be:57:
ea:91:01:50:21:a2:11:a9:4d:00:82:99:d6:f4:c4:
e9:2b:98:02:a8:b3:ee:c1:e7:fa:5c:76:97:a0:af:
42:b9:cc:3f:6b:de:36:09:0f:cd:64:5d:0d:e6:d4:
9b:a9:1e:e4:08:7b:5b:39:5b:8e:8d:6f:10:5a:39:
a5:ad:a9:df:fc:bd:a8:26:8f:d7:2f:26:56:37:84:
e4:3d:58:46:8d:44:c7:1c:dd:44:83:db:65:75:54:
c0:8b:1d:63:f8:2d:e8:6f:79:bd:72:49:ac:5f:ba:
71:49:e4:23:0f:5b:a4:76:62:09:0e:49:a7:a6:91:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:3B:9B:E3:FA:35:4B:41:65:E8:EF:E1:71:B0:BB:4D:15:B9:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13ff08b9-6e87-3ed6-acd3-e05dd6a22932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:77:b6:64:5e:32:aa:34:ac:94:e2:3d:ec:ad:9b:8e:d4:19:
7a:31:e3:58:e6:e9:ae:ff:ff:73:aa:9f:dd:a4:25:fe:c1:3c:
cc:6b:8f:67:cd:20:9f:4e:59:d3:af:48:f3:3c:fb:30:ec:28:
82:e8:95:2c:ea:ff:cd:01:6a:27:ab:d8:f0:10:dc:93:27:ff:
dc:d4:21:50:d7:87:e9:50:76:0b:56:86:ad:e7:8b:80:b4:03:
2e:c2:5f:48:98:24:54:3e:77:1e:cf:76:9a:84:fc:a0:2a:ce:
97:ff:be:80:f6:ac:5a:13:e8:48:da:d0:20:33:46:53:ab:8e:
3f:33:a6:8a:e3:6d:d5:f8:48:b9:52:41:47:64:24:be:25:1d:
db:8d:54:4b:36:5e:90:ac:b3:96:db:04:f5:41:ea:02:76:ca:
48:b8:4c:9c:9c:a9:7a:9d:be:e7:3b:f4:7d:85:75:55:29:cb:
b8:8d:07:e5:41:79:6b:9a:1e:e4:e6:73:d8:56:37:df:6f:a5:
3f:8c:e2:17:bd:1c:1f:e9:85:0b:e6:45:64:a7:03:07:8b:ba:
f4:7f:be:21:67:9e:7d:8d:0b:b6:a1:c0:a6:41:c9:dc:fb:8e:
c2:13:61:b8:9f:a9:ac:49:ab:3e:be:6f:cc:71:09:8f:1b:b1:
70:88:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:24:55 2025 by rpki-client