Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b07fc18-b738-333e-8665-8cc7f63d61e0.roa
File: 2b07fc18-b738-333e-8665-8cc7f63d61e0.roa (raw, json)
Hash identifier: ESW7gyVRY/ypy7UIgVxohW3zrHX7hnMXWkMpr/sgYgE=
Subject key identifier: C7:4F:CD:B5:04:D6:4B:29:0F:27:1C:82:AD:CD:86:C5:BF:7D:EE:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11811FDD4E70679DA86080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b07fc18-b738-333e-8665-8cc7f63d61e0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 67.169.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:81:1f:dd:4e:70:67:9d:a8:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d6cdea20-6833-4419-9eea-fc88e90544cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:69:b8:58:07:48:5b:3a:ad:73:90:15:81:
d2:0f:66:3a:e7:ec:b2:9b:bf:7f:d3:07:8a:26:69:
8a:17:67:28:c9:d2:a7:f8:d2:f1:72:8f:43:bc:f9:
0d:af:43:53:bb:b5:ea:54:9a:ae:1a:c3:3e:98:a3:
26:fe:8d:90:02:cb:ec:eb:15:fd:7c:df:36:2a:95:
f3:f0:90:e9:4b:10:ac:59:f1:33:52:95:3b:66:e8:
86:83:49:2d:8d:65:10:ee:28:6f:de:ba:f2:e8:c6:
dd:01:2d:c2:05:21:aa:14:a2:40:41:e4:d2:0b:50:
0d:41:28:bf:d9:e0:69:72:d0:40:d7:40:33:78:ed:
c2:32:15:a6:1d:a1:0b:d6:87:9a:12:4f:49:a5:db:
c5:2a:c2:98:b0:36:30:5a:dc:15:0a:50:c5:22:3e:
02:5d:5c:65:b7:cb:39:c4:62:18:d5:24:f6:c7:34:
4e:5b:95:ef:a5:70:e8:1e:a6:20:3e:9f:f0:bc:5b:
2b:20:c1:70:79:0b:d9:60:36:5e:c3:f6:1f:5c:ac:
e0:53:f9:db:c3:a1:74:b8:49:e7:53:cd:dc:ed:d0:
38:f5:76:99:10:3e:2e:b5:84:ee:58:b3:44:04:c9:
41:56:76:0a:b7:45:cc:23:8d:77:f9:88:84:e1:63:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4F:CD:B5:04:D6:4B:29:0F:27:1C:82:AD:CD:86:C5:BF:7D:EE:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b07fc18-b738-333e-8665-8cc7f63d61e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.169.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ed:07:9e:bf:fd:3e:3e:c0:6a:08:15:34:36:f4:bd:89:a3:
3b:8f:9c:4e:ef:6d:6d:cc:6b:b9:29:fd:02:2d:6d:d9:98:33:
1f:d6:62:c6:ee:71:2a:ba:3f:e7:5f:50:f0:88:20:5b:54:51:
05:84:9f:76:ad:28:1d:0a:3c:15:ac:b4:af:d7:59:68:6a:08:
a4:ea:f6:4d:21:4f:1f:37:72:ae:ea:50:75:8f:2b:c9:3d:12:
f2:62:f3:e5:ff:d4:94:53:30:6f:40:e8:9b:2d:38:78:bc:2f:
4d:f0:ca:9c:52:03:39:83:d3:32:cb:05:37:90:a9:e9:69:e3:
83:8a:4d:77:20:92:88:7e:34:d6:98:71:bb:13:5c:de:89:54:
c5:e9:06:28:6e:d4:cf:a5:a5:e7:41:3d:96:ca:b7:a5:3f:cd:
1b:1e:49:d4:c4:67:b7:7f:0e:1d:03:b8:ae:7f:b5:a1:2b:77:
93:ed:02:4b:45:07:3d:7e:08:c7:6e:0b:2e:37:6e:b9:f9:0d:
b4:63:55:0f:41:11:92:5c:a4:14:7d:9b:af:b2:dd:ce:42:dd:
b1:8a:de:a8:e9:c0:7c:c4:7c:31:88:bd:92:3e:f0:c3:f1:09:
00:5c:ff:85:59:8f:e7:d2:da:b7:45:dc:11:2a:d2:4b:2e:a5:
9b:6b:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:19 2025 by rpki-client