Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/296f9921-64ef-34b9-b0b9-b9d55e6ee47d.roa
File: 296f9921-64ef-34b9-b0b9-b9d55e6ee47d.roa (raw, json)
Hash identifier: XdgYsaeSdP+NbsAeSVBKEQxw90zqqXElN3aJ1OV4Hu0=
Subject key identifier: 09:ED:F6:A7:42:63:E4:25:47:6C:15:E2:D0:9B:9F:13:41:7A:AB:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11738084417BD936C65300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/296f9921-64ef-34b9-b0b9-b9d55e6ee47d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 174.62.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:73:80:84:41:7b:d9:36:c6:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=88e65521-c5c9-4c5b-a5bb-8e111b34c349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:8c:e2:cb:2b:67:29:0c:66:56:00:26:cb:
04:70:bc:23:76:fd:17:37:af:be:fd:fa:dd:89:bc:
c8:de:88:de:87:5a:30:5f:f3:df:d2:cf:25:4c:b2:
03:30:9e:13:dd:6e:63:4d:3e:99:02:16:70:88:9e:
ae:85:a3:55:8c:a1:e9:c4:d8:31:ab:fc:4e:6d:28:
73:2b:a8:83:60:5b:ec:3d:bb:1e:87:cb:b2:27:ee:
74:33:a0:a6:a3:b5:a2:3b:5e:98:45:35:b3:db:27:
f2:91:d8:93:be:3c:2e:bd:c7:be:c8:96:51:bf:85:
78:b8:d1:15:03:1e:88:0b:02:94:6b:ab:52:fe:3c:
c9:90:24:11:7b:48:69:a6:b8:42:9b:e8:a0:bc:00:
2b:d6:a6:36:e0:63:7c:49:ce:57:f9:40:30:58:1a:
b7:f7:70:04:ac:a8:51:5d:26:a2:af:3c:e0:3f:f8:
1f:96:32:ec:f8:8e:61:25:1a:90:73:e1:c4:31:4e:
52:50:6d:da:22:ed:ff:9a:ec:63:97:f6:59:c1:7f:
6e:67:5d:56:f0:af:ec:95:ab:b5:9a:e6:a9:3c:75:
72:a9:fe:d2:c4:f2:ad:33:6b:6b:40:4d:39:45:28:
6c:93:d5:50:de:05:83:67:e5:b8:0e:e9:f5:27:a4:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:F6:A7:42:63:E4:25:47:6C:15:E2:D0:9B:9F:13:41:7A:AB:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/296f9921-64ef-34b9-b0b9-b9d55e6ee47d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.62.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:28:4a:9f:bb:5f:14:f3:ab:6c:e7:f5:9f:37:81:a8:3a:20:
b5:a3:43:7e:8e:32:5d:f8:6e:fa:6a:8f:7f:00:76:6a:cd:ad:
41:13:83:8b:74:38:9d:d5:bd:d5:66:13:72:20:86:eb:51:cd:
a9:4a:d0:ea:52:c1:05:80:0d:d3:f5:d1:6e:15:b3:ee:67:bd:
4a:f2:6a:2a:5e:fc:81:10:e2:56:4a:4b:3a:e6:91:84:8b:02:
7e:4e:0f:d0:ce:f6:40:27:f5:fa:5e:0d:36:dd:f3:a5:cd:e0:
2a:9e:29:84:e0:27:8a:5e:1b:86:b9:d4:b2:c5:fe:29:70:a0:
87:7c:8e:c7:76:e0:4c:cc:a0:bd:54:a5:58:58:1e:a3:22:04:
6a:01:1e:de:86:2a:61:c2:7a:ab:64:c5:c1:ef:8b:0e:1e:d8:
2e:c1:03:4c:79:fe:9c:8d:e9:21:4a:6d:da:15:a3:c6:d9:82:
3d:b6:f0:fd:b6:d9:c8:0e:1c:7c:06:8a:3e:7e:e2:6a:92:c0:
8c:79:77:d6:ff:50:ed:b8:b4:e0:3c:e3:f7:50:a8:b0:0c:46:
b3:e8:71:21:ec:72:f5:fd:4d:2a:8e:e3:e5:32:7e:34:0a:84:
7b:a3:d2:11:99:28:f0:e0:53:0f:42:27:ef:d1:32:7e:b1:62:
64:42:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:34 2025 by rpki-client