Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa
File: 24a30da4-284f-359d-a000-798bee3ee6c2.roa (raw, json)
Hash identifier: 1mVc2348Yv2OCfEXBKEtitwa0W7ROTJLnA8dGra9uIw=
Subject key identifier: 39:47:FC:E9:C4:37:F6:66:F4:AF:F8:E7:7E:01:6C:FC:E7:44:B7:B8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9B2C4ABCB10FB6914240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.237.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9b:2c:4a:bc:b1:0f:b6:91:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=25db65a5-889f-41a0-a785-c1444d1ab691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:3f:3a:5f:32:83:5f:2a:b4:6b:88:51:04:
37:59:4a:ae:fe:c0:ce:05:59:a6:d0:2d:2f:c8:60:
5a:e3:48:90:c4:b6:fe:ea:37:c2:f9:a1:60:a7:e0:
00:9e:30:1b:4e:35:53:9f:0c:c1:a6:2f:bf:0e:32:
b0:4c:84:d4:ce:8b:2c:20:5a:df:99:ff:53:4d:1c:
6a:c4:b2:f3:a9:8d:a8:9d:71:69:cc:0a:7d:a1:f3:
c3:2d:55:2c:ba:51:ae:98:cb:17:de:f1:16:81:f5:
61:ad:59:21:8a:67:1d:5a:aa:af:3c:44:e0:d1:6f:
0c:4b:57:fd:8a:af:40:c6:dd:0d:69:2f:f6:34:09:
5e:34:d9:42:54:6b:94:42:2e:78:17:b7:36:3e:d0:
27:bf:21:e2:c0:f3:95:a0:54:b8:96:1d:c7:41:09:
05:c9:ae:c8:14:05:ed:2f:68:3d:a8:36:a8:92:2a:
38:3a:a3:db:80:dd:3f:c4:a0:43:fb:47:4d:3d:2e:
8b:fe:66:76:31:b6:96:b8:0e:7c:92:62:3c:9c:da:
f5:56:49:fc:61:9d:ef:63:dd:d6:2c:28:88:c7:71:
c7:10:bf:59:8e:30:ac:8c:13:ee:78:a4:46:18:3e:
12:e2:36:3a:4c:e8:fb:4b:13:a9:df:1c:02:72:0a:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:FC:E9:C4:37:F6:66:F4:AF:F8:E7:7E:01:6C:FC:E7:44:B7:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.237.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:53:58:8e:4d:4a:31:df:81:13:31:b2:bd:b2:30:d8:46:de:
0d:81:cc:a1:33:90:cc:f0:f4:2c:2c:f4:6d:e2:cd:26:70:8f:
06:c5:05:41:64:46:73:ac:42:74:e9:06:d5:fc:2c:14:35:5c:
12:f0:4b:a9:7c:9a:7e:22:67:45:ed:23:00:b3:28:05:fc:3a:
cc:85:9a:8c:20:08:25:ac:4f:f0:1d:a9:fa:2b:cc:25:ff:fa:
84:33:e2:3c:6d:5f:b4:1e:46:ca:63:37:1b:b5:0c:55:37:4e:
b3:15:da:04:f7:ec:27:67:2a:a9:90:d8:26:eb:44:63:fe:60:
1e:a9:3b:51:5e:e5:8e:d0:98:87:66:36:2a:6b:0b:7a:76:55:
6c:fa:bd:a8:6a:58:c5:1f:4b:d8:ea:98:f5:12:12:ee:40:6b:
86:d4:70:46:f6:0c:7a:43:65:a6:98:3b:30:38:2e:71:82:87:
8c:ed:26:12:5e:16:da:a1:e3:26:a3:3c:74:a8:6c:74:81:9e:
fb:47:86:22:b2:68:00:47:cf:ea:f1:e6:17:e7:2e:ba:86:ca:
23:57:45:64:cd:f2:7b:96:3c:31:39:50:36:7e:9b:b8:93:69:
93:e5:e1:e0:d4:f2:04:65:e0:bb:20:da:5d:f0:ab:a5:ac:1d:
68:88:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:47 2025 by rpki-client