Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/194f79bb-70d7-321d-a627-1e6ac5017aeb.roa
File: 194f79bb-70d7-321d-a627-1e6ac5017aeb.roa (raw, json)
Hash identifier: ne7rJptbLwtldqeVHLC8ye+lp2NNpToYNWesOlYm53A=
Subject key identifier: 83:97:6E:07:99:C2:BB:0B:CF:23:58:62:5C:91:E1:A8:1B:65:46:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A906DAE961234880F7600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/194f79bb-70d7-321d-a627-1e6ac5017aeb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.169.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:90:6d:ae:96:12:34:88:0f:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b90d701c-2e0c-4277-9c22-f4c930374058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:0a:81:41:60:91:f4:c9:91:43:c9:20:7e:
7e:9a:63:82:21:8f:72:ce:3a:19:8b:10:a4:10:3b:
af:e5:02:5e:cd:88:77:ca:26:b0:47:f6:d0:62:d8:
af:fc:c2:a8:17:d9:66:9a:ca:24:0d:c3:43:91:1d:
ca:ff:05:a8:cf:e2:e8:72:c1:e0:d7:14:43:f3:03:
37:09:bb:b4:42:c6:7f:8f:62:bd:6a:ed:8b:23:e7:
20:28:9c:68:be:69:69:a1:0e:4c:10:23:c1:b6:03:
ec:70:d4:8d:17:0a:fb:b7:58:9e:2e:61:ac:00:40:
00:d5:ff:22:de:f6:b9:19:b1:8e:37:0d:b9:a4:a0:
cf:db:37:d7:37:4d:3e:e1:dd:08:87:c1:ea:6e:a4:
92:3e:2d:e1:31:c4:14:a4:b4:df:9a:3a:82:13:64:
83:63:11:6b:e4:51:9f:7c:dc:ca:c0:78:6d:24:6a:
b3:1c:d0:17:f7:f0:66:d7:3d:65:97:ad:33:8a:a2:
48:d1:d9:75:91:20:e0:a3:67:9d:0c:17:46:d4:d6:
5c:5d:12:2c:c2:21:08:c3:3a:6e:84:09:a5:aa:d1:
b7:43:43:1f:29:b0:4e:fa:95:d2:3f:99:5c:b5:fb:
57:80:3e:f9:cb:be:7b:b6:2c:5c:65:64:87:a2:de:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:6E:07:99:C2:BB:0B:CF:23:58:62:5C:91:E1:A8:1B:65:46:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/194f79bb-70d7-321d-a627-1e6ac5017aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.169.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:c6:22:fc:85:49:bf:3c:f6:35:7f:4c:5f:1a:d7:05:c7:11:
42:7d:16:b9:af:4c:4b:43:bf:48:c5:45:da:9a:07:15:c4:cd:
67:36:4f:14:73:bf:76:e6:30:0d:fa:d0:fb:49:cb:50:46:ff:
6e:24:e9:89:5d:44:bb:60:07:1e:2e:fa:d6:93:80:5e:a0:f9:
ea:84:44:35:87:d4:a6:a0:ea:38:21:00:c9:4e:79:7b:72:55:
f1:59:cd:78:ce:ca:08:70:2c:f6:40:eb:d7:89:82:69:db:b8:
f6:3e:bc:16:15:80:15:0e:a9:b2:dd:65:a8:7a:84:16:0a:dc:
d5:ec:a4:8d:4a:2c:fb:b0:6e:74:1d:1e:0b:ac:2e:cd:8a:53:
fb:a4:5b:51:83:68:b6:1f:12:7c:8f:af:73:b0:91:03:8c:b2:
0c:80:22:9c:54:33:05:9b:d8:4a:39:cd:f4:67:b3:4a:76:30:
62:4f:c8:07:e5:70:cd:07:10:88:9c:3e:f1:e0:db:83:4b:06:
f1:fb:c8:26:01:76:95:71:83:32:44:a7:d4:2d:19:85:74:2f:
50:ab:3d:ca:f3:f2:a0:18:24:ec:fc:73:10:03:68:35:02:c8:
9d:28:cb:e4:57:3b:a0:fb:c3:8a:15:88:5f:24:f5:d6:8e:48:
4e:50:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:48:19 2025 by rpki-client