Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21cfb7d8-e318-3c40-a4b7-661683779037.roa
File: 21cfb7d8-e318-3c40-a4b7-661683779037.roa (raw, json)
Hash identifier: /WnKO4ir6hj1W6Mvw1kF0IcS1UOe9q+7R/zCdQ35NPk=
Subject key identifier: A0:F1:7C:79:8F:AC:92:E1:78:11:F4:CB:34:E5:DA:A3:49:FA:17:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123E05FF43C93D30E94880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21cfb7d8-e318-3c40-a4b7-661683779037.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.225.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3e:05:ff:43:c9:3d:30:e9:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6bf0d180-b84a-4854-8b7c-88227b0bf1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:c3:05:ad:65:93:fd:ec:c4:fa:b1:44:5d:
f8:3c:e7:61:70:ee:a5:e7:87:ce:81:fb:24:1e:cf:
64:a4:5d:dd:66:3b:2c:8e:d7:64:8a:34:4d:5c:bb:
86:4a:68:a5:65:37:58:6d:e0:3d:5f:09:0b:97:91:
52:5f:35:b4:8e:d0:1d:1b:4b:87:ff:94:f6:15:a1:
02:46:c3:68:48:fc:82:77:18:82:2d:c5:35:8b:59:
1e:8a:b8:02:ff:ff:b6:c5:15:9e:4f:df:04:b5:69:
b6:90:19:d6:13:cd:27:23:6a:8d:ef:44:6e:42:1f:
f7:29:b3:88:15:f7:a3:56:88:4a:5a:33:a3:ad:a8:
1e:22:82:73:17:08:08:96:a7:e2:6c:fd:32:d6:b8:
dc:5b:90:dd:8a:a2:fb:5c:57:29:f0:67:06:7d:81:
21:b0:15:0c:7b:c4:a4:c1:3e:19:64:74:d7:46:5c:
c1:65:e5:87:0b:48:ca:9b:60:a6:a6:31:68:e6:9f:
e0:7f:ce:a2:bd:6a:01:fb:4a:1b:e4:e0:ef:63:73:
6b:37:93:da:1e:9b:35:e2:ed:53:83:6e:39:e7:12:
12:6a:8b:48:aa:c9:17:26:80:4b:ff:4e:b6:19:67:
95:87:e9:dd:f5:ef:a4:33:19:d3:3f:64:39:87:0d:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F1:7C:79:8F:AC:92:E1:78:11:F4:CB:34:E5:DA:A3:49:FA:17:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21cfb7d8-e318-3c40-a4b7-661683779037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:8f:4d:2c:b3:32:7e:91:72:23:df:95:de:19:a1:58:f7:bc:
eb:29:b4:a6:e5:dc:35:b5:16:f4:ee:84:68:a6:06:df:63:c0:
68:80:11:91:d3:3d:fa:6e:3a:7a:35:bd:78:3b:09:1f:a8:05:
34:0a:b2:27:6f:ef:f3:f5:51:a4:3b:e6:66:25:ae:8d:ca:5b:
bd:14:89:a6:b4:42:11:0b:bb:be:e9:82:af:83:47:4a:6b:ba:
8c:f2:03:96:f6:20:4f:2f:a7:4e:13:47:56:08:af:d3:50:8c:
0c:c7:ed:41:fa:41:9a:d9:b1:d3:d3:58:cf:51:60:31:7c:70:
4c:d7:ad:31:d6:72:5f:07:e9:ac:3a:42:63:46:25:bd:1a:cb:
8c:24:31:ef:07:03:68:94:84:0c:e5:a0:f7:ae:64:b8:ad:ed:
f9:4d:8c:02:20:52:74:4c:98:df:a7:eb:cb:31:6f:8d:9b:13:
f7:1c:50:5e:c6:45:fd:46:f1:34:6e:c3:d8:c7:09:f3:23:d5:
34:a1:43:5b:c6:9b:0f:1f:2b:84:22:7e:d5:fc:fa:42:46:66:
a5:eb:3d:5a:0f:27:09:68:02:69:c1:f7:23:0a:43:42:5f:d8:
23:58:b4:88:cc:c2:aa:5d:3e:90:3d:49:c9:ec:12:30:d0:b1:
9d:94:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:59 2025 by rpki-client