Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a71124a-0f58-31cc-b446-f1ea90eaed4e.roa
File: 2a71124a-0f58-31cc-b446-f1ea90eaed4e.roa (raw, json)
Hash identifier: P8jn35xS2snPL1MPtTRRfDEBmS6/ByBBoBnLaqoAIwg=
Subject key identifier: 4F:9F:FA:3F:7E:E5:6E:64:4D:03:DA:2D:0D:B4:F1:18:F5:91:B3:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D3E2950CD1AC2C94B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a71124a-0f58-31cc-b446-f1ea90eaed4e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.173.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d3:e2:95:0c:d1:ac:2c:94:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=857a837f-7e95-498c-9cd9-ce5e8a3345bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:c6:0e:9e:ea:2c:b8:ba:6e:40:2e:3b:e1:
93:90:11:d4:45:2a:7f:6c:40:8d:ab:96:fa:98:c4:
e0:1c:57:27:b7:de:45:21:fb:e6:c2:c2:3b:28:7b:
40:06:b7:88:27:84:7e:e0:45:85:12:0a:3b:6e:e6:
e7:fa:70:0b:75:01:85:ab:1a:71:5e:46:2f:04:9b:
c9:49:02:b0:ba:d2:1e:2c:ce:a9:b7:29:d2:bb:e7:
83:74:74:f1:84:6c:e2:da:f4:8b:1a:5a:d8:08:42:
6e:af:0f:31:6a:32:22:79:d1:22:78:06:19:aa:87:
da:7b:4c:f1:2e:0b:fb:57:8a:63:78:04:78:b9:90:
72:85:21:8d:f0:20:95:c4:51:47:2c:2c:22:2f:36:
7b:c4:ac:18:70:10:3e:d2:9d:42:02:73:c5:83:66:
6e:1d:4e:53:6c:df:4a:27:3e:91:2b:99:90:44:27:
37:1e:aa:07:60:ba:a5:01:4d:17:30:a7:b0:6d:6a:
2c:98:4b:a9:c7:c0:10:46:f8:23:ec:e8:67:d8:59:
4e:c9:ff:a9:0b:7a:4c:1d:66:bd:d3:f8:3d:ca:08:
55:c3:2c:2c:ea:39:1c:5d:67:bb:dd:15:77:7a:71:
58:5f:2f:fa:9b:14:0f:a6:25:0a:28:43:d3:7f:51:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:FA:3F:7E:E5:6E:64:4D:03:DA:2D:0D:B4:F1:18:F5:91:B3:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a71124a-0f58-31cc-b446-f1ea90eaed4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:a3:10:ee:97:07:56:25:73:59:53:82:bd:af:65:7a:d4:27:
9f:46:64:17:7e:6c:b4:33:26:12:4c:65:7d:d0:0a:20:3a:2f:
ac:14:c6:99:fb:22:b6:b4:0d:84:e4:3d:20:d7:a5:25:3f:1a:
17:b2:f2:ef:84:04:f3:01:e2:e2:80:7e:5f:a6:9a:a1:ad:62:
2b:be:15:19:0e:2a:c0:58:ee:fb:b9:32:88:b6:aa:d1:2e:18:
47:51:43:68:ca:5c:2b:43:48:de:a2:e5:6c:56:7b:b9:e0:31:
ca:4e:6f:e5:6c:59:b4:66:ea:03:3e:b9:f2:14:d4:fe:17:92:
40:2e:33:25:3a:fa:e3:7d:f9:6d:cd:6b:c4:c5:3e:96:d4:f1:
62:f6:aa:9d:4d:7a:b6:1d:fe:b4:e6:53:37:06:22:91:66:f6:
62:5d:11:16:f7:2d:3d:38:cc:bc:50:87:74:29:f9:51:3f:b8:
a1:e8:5d:b7:eb:f6:a1:26:1b:a7:42:b8:0b:55:6d:9f:29:e0:
22:2f:9c:49:80:91:b7:1b:81:0b:12:0f:68:b4:91:82:f8:f8:
17:7f:34:c2:91:0e:70:6a:ab:8f:0e:4f:61:3f:49:1f:d6:e7:
4a:60:32:7d:8e:6b:53:af:dd:9c:89:8b:dc:3e:e8:2c:40:96:
d1:bb:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:23:46 2025 by rpki-client