Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237564dd-0bbd-33c8-a221-b6e3e40020cb.roa
File: 237564dd-0bbd-33c8-a221-b6e3e40020cb.roa (raw, json)
Hash identifier: QeXSZt4pJrKBEEj/sm4vVx/7DWfFDg4i+qC1DhWpafQ=
Subject key identifier: 78:5E:96:FE:50:A8:B6:99:82:CF:14:FC:BC:34:02:6D:E1:5D:0F:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AE38D4E91FD6C927597E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237564dd-0bbd-33c8-a221-b6e3e40020cb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.235.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:e3:8d:4e:91:fd:6c:92:75:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1ff8963b-f560-4281-98cf-26e922bcc076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:3d:29:8c:4f:74:42:a1:cd:52:bf:ed:28:
26:14:f9:d4:03:3e:79:13:72:97:5d:86:18:d6:88:
51:8c:43:60:06:2b:eb:5c:9a:e2:eb:d6:4b:3e:3e:
53:7c:bd:b9:ac:8d:71:26:31:db:f8:33:37:84:ce:
75:61:63:a6:ce:5b:92:c7:2d:9c:fe:16:64:39:4b:
d8:d8:9b:85:82:7b:e7:3a:59:4b:0d:86:3c:75:40:
3c:ce:e6:b7:81:3d:62:7c:41:66:09:f9:8b:62:38:
90:47:3e:e6:db:67:3d:41:25:6e:a1:69:2c:d7:17:
4a:c5:d1:63:00:f6:77:4c:ef:04:72:ef:02:b0:e0:
95:0a:34:78:97:db:a1:54:95:0e:13:23:6b:73:6d:
a9:81:f0:c2:ce:71:c2:b4:c5:82:0f:57:eb:be:c5:
fc:a8:a9:cf:d7:e2:1c:b3:d6:37:c4:29:fd:f1:65:
19:30:c5:91:b6:13:25:f2:be:ee:1b:0d:2b:1a:4a:
49:67:d3:b6:ef:c8:09:43:30:53:e7:fc:1c:56:15:
66:17:48:a1:ae:6f:42:89:5b:77:d1:b3:12:81:5f:
67:10:2a:f2:a1:8d:2b:7a:3f:29:4d:71:34:d9:34:
1d:9d:53:6c:f5:47:2f:15:ef:9c:44:6d:9e:65:b5:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:96:FE:50:A8:B6:99:82:CF:14:FC:BC:34:02:6D:E1:5D:0F:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237564dd-0bbd-33c8-a221-b6e3e40020cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.235.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ed:8d:39:d1:72:d8:de:32:c7:5e:b3:0e:94:c7:d3:1f:ee:
2d:31:3e:60:1e:c9:cd:b7:e3:36:d6:8b:26:24:59:d9:c8:aa:
16:0b:9d:e2:cd:28:02:a4:86:dd:13:40:5c:78:87:20:a5:27:
6e:92:1a:5d:3a:d2:34:12:93:4f:e5:83:eb:a7:55:35:e4:87:
de:6b:e5:db:bd:40:1f:d6:7e:e8:c4:b0:f7:4f:51:34:cb:5f:
86:e1:25:44:78:ec:81:c8:e0:fc:7e:02:5a:5b:db:c4:7e:66:
88:2e:dc:ef:d6:07:f7:39:0b:6c:47:fb:27:93:32:b6:73:b9:
8f:cc:51:fd:fa:83:72:05:c9:64:fb:22:07:e4:e2:9d:33:76:
ee:88:de:0a:12:f4:37:3e:59:7f:0e:92:6f:8a:a6:57:b1:53:
93:d6:9f:88:0a:90:52:f3:b6:29:34:1e:23:6b:3d:d7:df:35:
3e:92:95:e0:e4:cb:f8:e5:6b:c0:95:9f:66:fc:85:b0:aa:34:
1f:00:e1:3b:d0:b4:88:3c:12:ef:8c:1f:77:06:f2:8b:98:f7:
49:2c:67:f9:28:92:e9:04:72:83:89:84:d5:d0:69:aa:92:9f:
ad:30:e7:06:7d:0f:5a:b3:ab:8d:65:7e:83:bc:88:41:77:64:
7f:4a:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:37 2025 by rpki-client