Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2519d902-ad19-3e1b-b1a4-f7eab89542f0.roa
File: 2519d902-ad19-3e1b-b1a4-f7eab89542f0.roa (raw, json)
Hash identifier: Hb/q/tLJGJlsx/6PwbMDMQBUPibz8ErpMRHYF/fh81I=
Subject key identifier: 29:2B:E9:AE:A7:16:7A:F4:BA:93:6C:07:07:C5:70:C1:1F:D9:CA:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11F2FA706974EF8179CDE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2519d902-ad19-3e1b-b1a4-f7eab89542f0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 69.142.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:f2:fa:70:69:74:ef:81:79:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=df3e4484-1a0c-41a9-84b5-3ad5fa82df9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:63:b1:f4:0c:69:10:a7:32:0d:ac:51:50:
50:a8:62:e8:04:0d:d9:5f:39:f1:fe:57:4e:d0:d1:
7c:31:5b:82:0c:7f:66:e3:3c:69:65:27:3a:6a:33:
06:e7:bb:6c:e2:a2:7b:a2:ff:70:66:d7:a7:39:32:
6c:82:3c:2e:25:9a:39:4c:fa:b2:69:77:7e:fd:42:
7a:63:16:cc:05:65:e1:5b:16:23:03:a7:f7:96:72:
f3:13:a0:30:94:74:f2:9e:f7:1d:0e:6c:07:95:66:
7e:16:ae:cb:6b:c3:28:14:6f:b6:c2:40:ab:a3:82:
1f:15:52:47:88:87:bd:56:a6:45:d1:a6:52:0a:19:
22:2e:de:80:dd:74:cf:38:73:9a:03:22:54:a5:6d:
93:ae:58:94:96:d3:ad:eb:4d:20:f4:e9:48:0d:5b:
1a:36:0b:70:ca:d4:60:cb:90:5a:6d:96:7f:dc:93:
12:8e:58:0e:ea:56:c9:8b:90:7a:b7:79:fd:7c:71:
6c:1e:f8:32:41:b7:2a:ca:02:a3:aa:fe:7c:17:0a:
a2:a0:4a:ff:a6:e3:f2:5f:ec:0b:da:19:f6:78:ab:
47:b8:43:a3:fa:82:78:4f:d1:b8:c3:28:4d:56:a1:
33:cb:03:20:33:c3:c4:b9:4e:95:11:86:45:23:b4:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2B:E9:AE:A7:16:7A:F4:BA:93:6C:07:07:C5:70:C1:1F:D9:CA:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2519d902-ad19-3e1b-b1a4-f7eab89542f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.142.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:c2:2f:94:3b:19:a2:74:80:49:c1:d0:1d:17:31:16:27:96:
f1:ff:b7:cc:75:30:7d:b2:de:4e:ec:d6:10:c5:57:01:eb:6b:
77:43:9d:c7:bc:71:51:e8:27:64:97:cb:87:5a:c6:f7:72:6b:
3e:34:db:77:c8:b8:1d:ca:43:f5:10:fe:5e:83:93:4d:68:7c:
d0:15:65:29:9b:ee:ca:f3:e6:48:5f:cd:04:08:63:39:b6:90:
83:8f:30:04:11:9c:7b:d6:87:06:07:86:98:a0:1e:ef:54:3d:
3b:bd:2e:e3:8a:53:d3:d1:01:b4:3c:b7:6b:d1:ca:d7:da:75:
f9:07:bc:fe:6b:28:94:1f:b4:5b:bd:42:31:b9:e5:71:68:8b:
6d:0a:60:1b:44:92:09:55:60:f5:34:2e:df:8d:7a:fe:bc:14:
52:4d:cd:0a:75:96:08:14:f3:3b:80:12:53:b9:12:dd:0d:09:
0d:e4:0d:3f:e6:a5:07:20:bc:18:22:dc:c9:1f:a8:f2:b7:02:
b6:19:0e:36:b5:ae:47:f7:71:12:90:41:b0:af:ff:5f:3a:9c:
81:ff:ec:a6:79:90:58:e3:14:39:93:3a:11:e0:9c:83:59:5c:
05:0a:86:eb:e2:96:c9:e5:af:81:e4:68:f8:30:82:26:37:dd:
43:83:50:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:27 2025 by rpki-client