Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/306e2986-6762-3cc3-b931-e80d78a87c64.roa
File: 306e2986-6762-3cc3-b931-e80d78a87c64.roa (raw, json)
Hash identifier: YE6g9QjOllBJnoTucdSlKbGCi+U5ARdg/7WfQ3iHzE8=
Subject key identifier: 5C:71:E7:30:F1:5E:11:94:7A:61:0F:90:49:CC:95:7F:D6:27:E2:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123AD2D8BB0EB173821C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/306e2986-6762-3cc3-b931-e80d78a87c64.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.224.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3a:d2:d8:bb:0e:b1:73:82:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=aa72e07e-4f18-4442-899c-e31cc481cc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:aa:65:1f:00:ac:2b:46:31:e2:7b:83:8e:
ba:11:1f:66:a4:22:86:35:c9:7d:1e:e9:14:39:3f:
c1:22:eb:41:f5:a4:8b:b7:cd:e4:91:fc:8e:4f:a2:
60:0f:ae:cb:ec:e8:52:1a:12:6f:09:68:fb:8f:a0:
57:b4:cd:8c:9f:31:f0:88:bf:a8:c1:51:65:5a:0c:
6b:9b:64:f3:aa:38:22:e2:74:71:68:b5:4e:7f:b1:
54:13:6c:ab:08:d1:3a:d4:47:d9:65:f4:d2:47:3b:
93:62:c3:8b:43:bd:d2:38:8c:e5:75:bb:48:04:11:
53:10:a8:b3:1b:0b:d2:c3:58:cd:2f:da:1b:f9:ca:
0d:2d:86:9f:b5:fa:bd:71:4e:f6:d1:85:c1:0f:87:
4a:44:92:6a:54:cb:a8:21:93:5a:cb:10:fd:e6:8b:
3b:8e:38:ad:71:88:e2:87:b6:74:1d:30:72:2a:8d:
ee:3c:e7:bd:36:9d:2c:ed:5f:69:df:4e:e0:c5:14:
d9:02:57:39:d2:18:45:b7:80:a2:ca:83:31:99:a2:
34:c5:3e:6d:9d:72:ee:b9:c9:6f:73:ed:82:b6:07:
22:f9:27:c7:27:c6:ce:95:3b:57:d6:fd:56:00:3c:
46:0a:48:ab:25:1f:36:3e:ac:d5:ca:0b:da:0a:f1:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:E7:30:F1:5E:11:94:7A:61:0F:90:49:CC:95:7F:D6:27:E2:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/306e2986-6762-3cc3-b931-e80d78a87c64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:24:06:8d:2b:0a:92:05:4c:7b:92:e0:9e:07:b8:a9:7e:e5:
10:02:ca:7e:a9:0d:e0:59:b9:d7:9c:f4:ea:f4:3f:40:e4:a1:
4f:42:46:94:24:8c:c2:b1:3b:06:2f:02:03:35:15:f1:39:de:
1e:0c:30:00:07:c3:e7:d6:de:a7:4b:8a:63:72:26:41:05:6a:
ef:6b:4d:08:97:e6:04:1e:1d:63:62:06:98:e4:b8:83:a3:d5:
7c:50:e1:5c:e7:00:cf:a1:03:2d:a1:ba:af:ba:3b:a7:a3:68:
0a:1e:63:90:4c:51:ce:ce:9d:14:64:7b:0b:92:8a:5a:4e:67:
7b:b7:2d:d3:b5:62:a3:d2:3d:28:99:3c:fb:38:bd:a5:e4:61:
56:6b:ba:a7:dd:b1:30:02:1f:11:30:8a:1b:e4:ed:ce:52:a1:
fc:88:a9:cf:ee:d3:39:c5:93:9f:53:a2:a0:bc:d3:17:19:11:
c7:5b:37:8c:6e:4d:3f:1b:ab:a5:c1:c7:cf:c2:5c:af:71:9a:
d9:ce:66:56:5f:a6:7e:c5:2d:46:3c:34:54:41:68:d7:53:13:
2a:d4:87:3f:0e:01:bd:87:12:60:ee:65:c1:b5:01:66:1c:fc:
ec:42:8f:bb:7e:63:f1:4d:34:19:77:14:5c:dd:71:4d:fd:f0:
d5:c0:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:14 2025 by rpki-client