Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29c908c9-1b6d-3955-b2f9-f0568f86d255.roa
File: 29c908c9-1b6d-3955-b2f9-f0568f86d255.roa (raw, json)
Hash identifier: b1b+Pdb/x2pflnE2fGHtldz727fhAkH2P4ki+4g8jSw=
Subject key identifier: 0C:17:AC:13:C4:65:3D:61:2E:B7:DD:B0:28:61:7C:40:0E:C8:2F:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B3D5E8D11AD15A0BA1100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29c908c9-1b6d-3955-b2f9-f0568f86d255.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 107.5.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:3d:5e:8d:11:ad:15:a0:ba:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8f8dd78f-dab8-41f3-9282-03de0773f219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:98:b6:7d:5b:1e:68:05:08:e7:cd:2d:c2:
62:70:cc:95:c0:b1:56:1e:80:14:35:a0:da:6e:ea:
99:43:de:99:d6:76:14:70:b0:62:46:4a:ea:62:ad:
44:4f:9c:d0:7c:e9:78:01:46:57:bb:7d:91:e7:7e:
a5:18:7e:97:07:6e:1b:7f:24:8a:fb:de:fc:da:a0:
14:24:75:ab:38:b4:f8:43:44:f2:b0:07:7c:a3:5e:
5d:a1:d1:a4:b9:e2:26:55:ff:8d:d7:f3:f2:fd:90:
3e:82:63:0c:3b:cb:e7:32:ea:0b:c1:c5:88:78:02:
05:2e:ad:d8:6e:21:1d:a8:0e:b3:68:87:2e:0f:57:
6e:04:f0:f9:be:8d:8b:f2:f8:01:6e:26:21:5e:f4:
51:17:4a:a8:bf:04:5b:cc:17:cb:cf:87:f0:a5:56:
28:d2:97:76:5f:09:4f:e5:66:21:e7:5d:e1:ff:d3:
89:4c:1f:17:64:fa:b2:15:10:7a:91:73:0d:01:7c:
42:1d:1f:3b:89:68:b1:ad:d8:4b:2b:9c:70:e7:b5:
01:3c:46:e3:02:8d:92:22:61:c3:9b:06:a9:ab:25:
8b:4f:b6:7e:36:e6:8b:7f:cc:db:32:15:b8:89:52:
93:14:82:73:07:f7:bd:a0:aa:45:24:e6:eb:56:8a:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:AC:13:C4:65:3D:61:2E:B7:DD:B0:28:61:7C:40:0E:C8:2F:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29c908c9-1b6d-3955-b2f9-f0568f86d255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.5.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:7e:2a:91:3f:53:53:71:04:2f:30:c3:c5:ca:00:fc:c5:ee:
f7:b4:76:92:06:ec:c6:c5:c1:c0:a0:fd:e1:19:be:ac:42:9a:
a6:8e:28:68:21:d9:f0:00:d9:50:0a:7c:b5:e9:c7:e2:fa:0e:
59:66:86:63:33:f5:24:b8:a5:70:1f:fb:93:7f:5c:aa:8b:24:
20:59:4b:dd:56:36:7d:bb:85:5c:be:2c:f4:22:59:62:cc:bf:
2a:68:91:5a:57:f6:16:73:19:55:5a:9b:b4:40:7d:ed:a2:f1:
5e:23:50:41:97:74:85:68:97:8f:70:38:95:8b:f7:48:2c:47:
51:8f:30:94:d8:37:88:56:34:ef:2d:3f:50:0e:70:59:f7:b7:
f3:d4:60:f3:7d:51:65:65:ae:fd:e6:53:bc:b3:e6:9b:cc:f2:
93:2b:a3:10:5b:3b:81:6c:dd:39:41:34:6d:37:ae:89:57:9f:
c3:8e:3a:3d:a9:52:0f:ba:7e:5d:2a:91:b1:18:72:90:1b:e8:
ef:87:8b:b4:98:41:7c:2b:e2:26:2b:3e:c3:31:3c:cb:6b:7c:
cb:4d:74:45:51:d9:6b:77:f5:5d:87:dd:60:1c:22:75:34:d7:
b3:4e:da:35:6a:df:2b:fa:d1:0b:16:79:25:3e:1d:7d:ae:86:
b0:d0:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:38 2025 by rpki-client