Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16688cb0-2f3b-3001-af26-2857872e018e.roa
File: 16688cb0-2f3b-3001-af26-2857872e018e.roa (raw, json)
Hash identifier: GBRsCXIBmeM6GC5jVQ/5SLyZkaLckK+c0+sYvlGiuXU=
Subject key identifier: E5:43:77:5D:5F:AC:F6:44:DC:1B:DF:16:88:77:BE:43:34:08:F2:41
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123CF65C246653F92E6570
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16688cb0-2f3b-3001-af26-2857872e018e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.225.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3c:f6:5c:24:66:53:f9:2e:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f5f53dc1-d69a-448b-a9ae-eaec48d7c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f7:2a:e0:07:1a:d5:4e:81:63:5f:f2:d2:68:
51:46:c2:19:ba:42:70:e1:2c:df:24:25:4f:22:8c:
3a:e0:02:c2:5d:76:c6:fc:3d:c1:a6:ef:d8:e1:b4:
c8:79:f2:6d:35:3b:40:89:c0:24:e0:2e:5f:ff:98:
be:9a:34:6d:a0:0b:65:58:7f:bd:41:28:c5:92:44:
6d:4e:16:9b:ac:6a:0a:a1:90:d9:71:aa:65:e5:eb:
9e:26:be:68:45:3c:7d:fe:26:50:fb:a5:fc:6e:02:
7a:81:39:1e:e9:e7:ca:9e:75:7a:9f:c6:c3:90:4f:
b8:1e:17:41:32:4d:f8:80:90:22:5a:7f:eb:72:34:
41:e2:ba:19:a0:ac:ad:e7:d4:e6:91:46:96:35:a9:
35:99:ef:a8:d0:73:d1:39:33:fe:29:b7:ee:a9:c7:
2c:05:57:4f:5b:3a:74:16:d7:e4:d6:30:1b:d8:26:
ab:a9:f0:ab:41:08:4f:f5:1a:bc:28:3d:7d:12:93:
46:51:44:b2:d1:d8:29:ca:27:30:da:69:8e:b2:d3:
84:04:91:2d:6d:b7:b9:69:a4:31:6d:10:98:a8:47:
97:62:ff:37:76:98:d2:d9:cb:fd:18:50:7e:43:66:
15:d5:ee:b7:41:1f:8d:98:f6:8b:a9:30:08:84:72:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:43:77:5D:5F:AC:F6:44:DC:1B:DF:16:88:77:BE:43:34:08:F2:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16688cb0-2f3b-3001-af26-2857872e018e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:7f:dd:15:69:f9:4f:73:72:a2:79:56:f3:16:0e:f2:70:1f:
c9:ba:81:30:66:b8:7d:6d:a7:dd:3a:5e:45:8a:ac:d3:a5:1c:
4e:74:62:6f:f9:26:23:c6:66:01:04:50:f0:b8:c6:48:79:ae:
67:eb:d4:b3:73:30:57:72:df:ce:cb:7e:f5:e0:5b:7a:55:81:
33:bc:7c:33:1e:bf:a0:c6:0c:39:79:a7:c7:20:5e:e0:4f:b6:
1f:b2:3a:fa:47:21:49:8d:e1:a8:55:a7:0d:ed:92:06:88:3d:
60:73:dc:2e:b2:15:13:fb:65:54:d1:41:4b:14:b4:d3:70:46:
3d:e8:e8:e7:02:da:72:1c:8a:44:e9:65:1f:58:16:26:4d:7a:
5b:ba:cb:b5:88:c9:41:a5:6e:ec:dc:50:c3:7c:fb:71:0d:77:
ec:86:9c:e8:5a:c3:b4:99:f2:ac:1e:2a:66:eb:d8:2f:05:ec:
64:06:51:96:9a:19:52:36:a1:d3:8c:26:0c:7e:ea:a5:3d:e8:
d6:0f:04:b0:47:4a:45:17:6a:37:1c:c7:38:8d:f8:88:41:94:
5c:d3:e4:fe:7a:17:e8:0f:d6:9c:d5:c8:b0:23:f3:48:7f:80:
1a:6b:75:3e:e4:ee:5b:d6:81:58:be:88:be:b5:57:14:d6:e6:
76:b3:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:32:20 2025 by rpki-client