Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f25733d-8a4a-3784-a615-ae2ba4a2a08e.roa
File: 2f25733d-8a4a-3784-a615-ae2ba4a2a08e.roa (raw, json)
Hash identifier: M3te9pUUM2T1i2hDOe8w9LFhzgZS2d6toi2aPuzdja8=
Subject key identifier: 1D:E1:A0:AE:17:90:4D:C4:DF:E6:DB:8C:A7:69:BA:E3:5E:32:0D:C5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12788F4321AF994458B6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f25733d-8a4a-3784-a615-ae2ba4a2a08e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.176.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:78:8f:43:21:af:99:44:58:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e4b8133b-b145-4108-a04c-2aab31811d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:eb:33:04:0a:b6:73:f5:7f:61:6e:e4:ce:
13:d3:5f:7a:8c:b2:20:78:58:20:a2:ff:41:6c:b8:
02:f0:3d:eb:d5:d6:b5:65:af:d6:4a:4f:81:12:2d:
1b:1b:d8:e7:58:89:6d:ac:c9:cf:43:7a:eb:21:65:
95:94:d7:c7:07:66:eb:64:f3:2f:b5:b6:b1:37:d5:
85:b0:89:a8:17:69:5e:eb:d1:15:ef:b8:e4:82:9e:
bc:ac:74:7b:bb:66:90:31:8a:12:43:71:09:97:09:
d5:82:60:42:52:77:6e:37:59:4b:13:a1:d9:2f:6c:
30:81:34:c7:57:e4:c2:90:2c:f5:16:e7:78:78:74:
1a:1d:5d:1a:f7:3d:a8:a5:36:40:d9:27:3f:51:63:
f2:10:3d:2c:d5:36:6a:a2:d1:2e:e2:79:46:54:20:
33:e9:b7:93:35:d7:f6:e7:33:d9:be:17:a1:e6:90:
8e:21:aa:f5:37:c6:91:77:7a:3c:93:1d:85:1f:d5:
b5:a6:19:7c:fe:1f:c0:53:df:25:06:8b:fa:66:1c:
97:2b:b7:52:2c:8b:25:cf:f3:9f:27:0b:19:e6:c9:
42:1e:d7:82:5d:14:a4:eb:d9:ec:a0:80:ba:c1:68:
e6:4a:dd:6a:7c:bd:e6:3d:c9:f4:49:48:19:65:28:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:A0:AE:17:90:4D:C4:DF:E6:DB:8C:A7:69:BA:E3:5E:32:0D:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f25733d-8a4a-3784-a615-ae2ba4a2a08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.176.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bc:f3:53:56:d2:68:07:9a:6a:0e:e4:8c:e4:e9:7f:c2:c5:
0b:4f:08:ed:07:ed:2b:01:65:63:0f:81:72:dd:a3:25:9f:50:
35:af:b0:24:b0:b2:2b:e1:ca:7f:0f:e7:96:0d:9f:4a:ff:b3:
ae:7c:fe:96:4e:3e:52:6d:01:0f:af:45:ed:c2:4b:0c:39:12:
5c:11:3a:81:a8:dc:23:14:4b:eb:dc:2a:62:5e:73:c3:a2:45:
e2:40:62:a2:48:90:28:94:ef:50:ed:1e:dd:56:7a:e9:de:04:
68:5e:d5:87:57:94:65:85:c8:b4:1a:4f:c5:ea:29:48:fd:55:
ed:8a:b0:af:67:02:cb:80:d8:83:8b:4d:87:41:ee:8d:95:d7:
e0:b2:6e:08:9c:f3:05:d5:74:00:f1:59:88:f5:35:8d:b5:c4:
df:81:7f:e5:f0:9c:fb:57:ec:24:cf:6e:5a:02:e1:5c:27:1f:
59:31:47:6d:4c:f1:38:37:bb:f5:5c:b2:4d:89:cb:f0:d7:7c:
65:66:c3:57:22:a6:d6:7c:31:e2:dc:73:43:e1:4c:0f:22:eb:
9a:d2:5d:53:d0:05:b0:dd:38:67:f0:23:0e:91:db:4e:1b:86:
80:d4:71:6d:65:b2:b8:9b:1f:24:32:e5:5e:92:14:74:b2:73:
39:c9:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:42 2025 by rpki-client