Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21de3736-994e-3419-b538-02095e47ad02.roa
File: 21de3736-994e-3419-b538-02095e47ad02.roa (raw, json)
Hash identifier: RDFA1tynLYDPa/eQO3Z2CZx5lP3yBOrvtPYDa6LcUto=
Subject key identifier: 0F:BF:37:DF:D3:70:C1:9B:0A:C8:32:FD:38:5B:96:D4:94:49:7E:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DCF979CE6D0D9AB01FA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21de3736-994e-3419-b538-02095e47ad02.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.232.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:cf:97:9c:e6:d0:d9:ab:01:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d2c2d616-fa29-4809-b748-a964e022241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:30:0f:10:f1:bb:91:4b:5e:f4:a8:9a:b9:
0f:7f:32:fb:ca:7b:02:ee:76:eb:41:6a:21:e2:f6:
01:a0:10:4a:62:bf:33:da:cc:67:8b:fb:36:13:c0:
3c:18:7b:4d:91:f6:0c:a6:ab:f8:bb:c5:1d:10:e6:
ba:a8:ad:91:a1:59:78:b2:62:92:9a:9d:97:63:67:
49:1d:cb:6d:b6:3a:d3:0d:4d:bd:1c:64:d9:5f:49:
77:8b:8e:01:b6:44:da:05:53:4e:03:43:32:14:5c:
7b:c7:a5:d8:46:06:05:ac:28:46:28:f0:96:96:93:
37:bb:96:c9:70:61:5b:c7:a8:ff:d9:a2:b6:01:8e:
ff:f3:0b:e0:cf:ec:ad:f0:62:8c:75:32:7f:30:0a:
ad:10:ab:30:ec:0c:71:94:b0:e4:9f:c4:b8:d8:78:
c4:a7:cb:62:60:bf:8d:98:5c:f3:64:d7:83:1b:e8:
f0:2e:1d:fc:db:8f:52:05:79:07:59:50:ad:d6:4d:
1d:5e:89:32:9b:64:2d:d9:5d:8b:8c:73:2f:a4:28:
98:ee:49:ca:fa:0f:50:71:e4:23:cf:d2:3e:ac:89:
b8:4f:df:f0:6a:00:0a:0c:7a:47:83:ec:60:ae:b0:
5b:f5:81:b6:fa:86:72:a5:de:9f:27:f9:d3:af:d8:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:37:DF:D3:70:C1:9B:0A:C8:32:FD:38:5B:96:D4:94:49:7E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21de3736-994e-3419-b538-02095e47ad02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:fa:b8:2b:f3:28:d4:cf:09:c5:d2:83:d4:e3:23:e0:29:8a:
8f:c9:b6:e4:dc:67:6c:9f:11:7a:ae:c4:be:65:d9:52:24:41:
c2:ab:33:18:75:3d:64:cc:88:89:dd:c0:2b:f2:7e:8c:c4:01:
ed:02:7d:95:43:03:0c:a0:b3:61:3e:1d:61:28:68:55:fd:ff:
04:4b:6e:82:10:14:55:c2:79:62:e3:47:60:ab:2f:19:99:9b:
32:8c:12:34:4f:de:75:52:47:05:92:03:82:e4:de:eb:ee:3f:
43:3d:a6:94:79:ff:47:e6:fa:16:57:33:a7:d8:e9:3e:55:33:
cd:bb:6a:4d:28:33:4d:49:ad:85:fa:23:be:f8:7c:63:d5:d6:
8c:95:36:04:29:01:40:45:ce:0c:17:d6:05:b4:f8:5a:79:c0:
1f:93:78:cb:b8:5f:5d:14:b6:9c:80:6f:82:13:da:20:4a:7f:
24:b2:03:ab:0e:55:17:db:9c:f6:49:e0:d8:32:5c:06:b3:37:
a1:dd:83:74:c7:af:5c:d9:e6:c3:b1:6b:80:b5:b7:c4:3e:1b:
f5:6e:5d:1f:a9:c7:52:81:49:f8:48:60:05:4a:25:b6:6a:0a:
d8:c7:22:3e:1f:8a:bd:34:b7:75:94:73:ce:b0:bf:bc:5b:08:
c3:dd:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:13 2025 by rpki-client