Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27f9ee81-6a2d-3378-a559-ca3224c67eb9.roa
File: 27f9ee81-6a2d-3378-a559-ca3224c67eb9.roa (raw, json)
Hash identifier: LAPXlQFbn57uPK5bsy/CvqSl6ZwjtGGdbBsf85BlYyU=
Subject key identifier: 05:7B:B8:A2:E6:E4:10:25:1D:F9:8A:E7:A9:72:58:01:07:FA:53:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123BF68497015A9DD10400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27f9ee81-6a2d-3378-a559-ca3224c67eb9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.224.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3b:f6:84:97:01:5a:9d:d1:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f3dfe8d9-21e9-4bb9-bd6d-b79f31108845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:07:33:eb:72:f1:66:7c:4f:28:63:a3:8a:
37:36:32:bb:2d:af:68:c0:60:23:66:d7:64:44:64:
f6:61:67:c4:05:d5:bf:23:b8:a1:01:9e:ac:8a:cd:
79:57:90:12:fb:65:0f:d9:dc:50:8f:e3:42:6b:70:
d5:2b:b7:b3:c1:63:c8:3d:bc:ac:18:3d:a9:dc:d9:
49:f3:ae:d4:dc:a4:c7:48:47:bf:12:20:22:7a:b7:
16:48:26:96:6e:47:bc:96:5a:a3:c8:43:d3:58:07:
e4:d1:d9:1e:13:2b:cb:f1:84:51:c4:25:e0:ba:93:
c9:57:fc:b5:03:a8:f8:f0:5e:52:22:70:30:20:58:
d4:54:01:6d:74:8b:db:1f:4d:3c:a8:ad:9e:30:bd:
c1:9b:e0:3a:24:b6:9c:f6:99:a6:1a:48:80:d9:a9:
f3:80:ad:ef:3b:e1:63:26:95:c5:e3:c5:ee:7a:03:
da:2e:7f:59:29:7e:5e:12:cd:80:55:8d:1a:2d:5a:
93:fe:db:aa:c0:e1:f7:c0:53:98:12:1b:98:6e:27:
48:9b:d3:7d:73:7f:cd:ba:81:80:4e:fe:77:bc:5d:
b2:50:53:a9:14:16:17:27:b2:8f:a1:7b:ca:90:9c:
e5:c2:d6:71:24:2f:55:dd:f3:2c:32:f6:d7:99:38:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:B8:A2:E6:E4:10:25:1D:F9:8A:E7:A9:72:58:01:07:FA:53:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27f9ee81-6a2d-3378-a559-ca3224c67eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:71:67:61:07:d2:91:04:4e:d2:d7:d9:3e:4b:28:38:be:a7:
a6:9c:f4:c4:f0:65:ef:95:21:b3:03:17:05:3b:ec:76:f7:f0:
a1:18:22:e6:cc:4b:6f:1e:fc:a0:b9:17:1f:d7:51:a3:dd:c6:
3b:53:13:df:09:24:5e:1c:cf:f3:77:6d:9d:04:2a:12:58:c1:
53:64:fd:df:74:21:6f:d7:a6:a6:65:b0:8c:ae:f3:f8:b9:8a:
66:78:9a:9a:f5:39:8d:ec:54:46:d8:b6:3c:4b:45:9a:8f:92:
70:98:b7:bc:cc:68:c0:b5:16:88:f6:42:9d:cc:78:4b:41:78:
d2:61:86:a3:7c:a5:73:00:3b:18:56:fd:be:2f:61:e8:ef:90:
26:2f:0d:6a:ca:d2:86:92:84:38:eb:83:a0:98:1d:22:61:04:
3f:3f:87:13:20:65:7c:e7:29:15:93:42:ff:11:bd:56:7f:01:
70:53:8e:d4:6a:94:49:d9:35:28:3d:40:7b:86:4e:90:e2:5f:
e0:88:ba:fb:13:96:75:4e:a5:37:6c:06:a3:c9:d8:99:a5:c7:
83:9e:45:59:ac:65:cc:b6:2b:0f:21:9a:9f:b6:85:85:3a:f4:
a6:b4:22:80:78:d8:61:8a:28:98:d1:55:d4:58:f7:5d:1f:0f:
7f:5c:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:46 2025 by rpki-client