Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa
File: 1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa (raw, json)
Hash identifier: VBWufuJ8uNzhYuMmhzb1EzTSwiDbPtroif++TrOe7tk=
Subject key identifier: FE:E6:E6:A2:D4:C9:CA:01:BC:E3:54:2F:23:6A:14:A6:A4:7C:14:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A90ADAD79500CEEBA2080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.170.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:90:ad:ad:79:50:0c:ee:ba:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=997fc69c-f162-464f-802b-e1a126f65930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:98:43:44:4c:16:7e:fa:fd:91:ef:74:29:
f0:37:b4:28:94:25:6b:89:12:f7:b3:4e:e7:b1:c4:
b9:2e:86:bc:9d:fe:0f:da:37:0a:c9:96:98:bc:0f:
5e:78:21:3d:64:74:5e:5c:68:fe:31:49:04:df:9c:
e0:d7:62:cc:cc:d3:19:c6:81:8f:66:40:da:d7:14:
11:88:67:1f:6e:53:14:a6:3d:29:40:45:24:6b:22:
c6:73:73:01:dd:12:c2:c9:21:1a:d7:bd:e8:2b:36:
33:40:1f:03:28:a2:10:f8:9d:bf:48:64:58:da:a4:
85:9f:7f:df:21:ff:58:02:3a:1c:0f:d3:8d:7f:57:
98:2d:86:48:64:c3:b9:57:7e:24:9c:19:21:32:a0:
e1:75:7e:1c:21:37:d7:bc:43:72:ab:60:c2:ea:ce:
c6:5f:51:87:b8:4f:26:35:cb:0c:bc:2b:82:44:9b:
99:5c:16:cb:5c:93:3b:90:6b:0c:69:ac:17:d8:35:
88:9a:c3:56:25:a9:40:47:4d:64:11:c0:bb:7b:18:
de:bc:a5:e8:2e:7b:70:7d:44:59:14:8c:e7:49:8b:
2a:bb:ab:8a:8d:29:28:8c:63:4f:b0:7b:7b:07:9f:
15:99:93:c6:0d:50:ea:04:17:db:8f:54:c7:18:95:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:E6:A2:D4:C9:CA:01:BC:E3:54:2F:23:6A:14:A6:A4:7C:14:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.170.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:cb:4d:70:db:d4:f2:49:7a:78:ce:1a:79:5a:32:c5:64:6e:
e2:ed:4d:06:34:bc:32:5c:a5:60:d3:9b:b3:18:17:bd:7e:21:
0e:c5:21:3b:4e:20:1e:a1:20:8e:6c:87:40:93:a1:b5:e9:1a:
36:58:ea:2f:d2:08:c9:e6:83:0f:3b:7a:f5:f9:47:35:8b:b3:
3f:04:4f:19:43:05:69:6b:2d:5d:76:8d:af:c8:f5:ea:9e:d6:
a0:74:ff:60:72:e3:68:db:dc:06:9b:27:96:72:15:5d:a4:03:
9a:9d:f0:a2:37:b1:0c:1b:ab:b5:0b:30:0e:55:9e:98:64:8d:
43:04:01:ef:9c:28:31:dd:63:57:28:37:90:3b:71:60:31:a0:
d3:28:cc:a3:2b:20:5c:0e:f2:ed:96:00:3e:a6:fc:67:ed:63:
b4:d1:42:a2:d8:f1:45:89:a1:ea:4e:05:00:02:95:78:19:02:
6c:e5:97:bc:75:2b:6d:df:39:96:f3:0f:4d:f4:29:96:f2:fd:
db:93:3d:49:d8:44:8d:1f:3d:fa:d8:4f:53:f4:ed:38:ea:f5:
24:99:0e:d5:59:79:8f:48:8c:1f:4c:24:21:80:28:b4:f2:18:
ab:d9:5f:5b:d7:bf:ba:cc:52:18:4b:72:fd:df:19:7c:f8:fa:
07:3c:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:18 2025 by rpki-client