Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3076ce9c-ab50-39fd-b9f1-1247cd332edc.roa
File: 3076ce9c-ab50-39fd-b9f1-1247cd332edc.roa (raw, json)
Hash identifier: gOr8dEmNvxkyB5FddZVyjdq8nBBYJ3JhOK5zKgHp4bw=
Subject key identifier: BB:81:40:28:BB:A5:A3:25:61:B6:D0:EC:76:C7:ED:EE:D1:53:B9:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DCB509662751AD3263900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3076ce9c-ab50-39fd-b9f1-1247cd332edc.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.232.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:cb:50:96:62:75:1a:d3:26:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1a27d06f-d2b4-41dc-ab4d-b7149ef0ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:53:23:0a:78:b8:66:68:e8:5d:46:80:bc:
e1:d9:18:f9:10:80:7d:cf:7a:11:1e:bb:39:3b:a7:
c3:bc:ee:b2:2f:48:c0:e3:ca:de:92:4f:39:ac:62:
a2:f0:3a:cc:39:d0:80:06:53:2c:24:c2:d9:c9:8e:
ea:8d:df:d3:8a:5c:6d:8a:44:b6:d5:34:ee:8a:ad:
c5:b9:a9:8a:91:07:87:3b:97:83:90:7e:27:b2:0f:
b6:c6:96:c2:30:a2:55:a9:12:42:31:e1:ff:d9:f3:
41:25:84:c1:e3:c2:0c:1e:3d:11:a4:68:b5:bc:10:
42:49:27:f4:63:7a:28:ea:c4:4e:56:db:7d:cb:d0:
0a:16:36:ec:a4:18:b6:01:30:51:b8:cf:31:6e:d2:
77:af:c3:a1:8e:cf:3d:3e:95:fb:bb:81:4a:a0:5d:
a7:9b:de:73:a9:e8:10:ff:ec:bc:3b:20:d4:01:d8:
62:9a:98:c3:87:71:0f:cf:c3:28:2a:e6:84:f3:9a:
d8:7c:3d:51:21:70:08:1e:d0:9e:50:2f:3a:53:b9:
8f:55:12:0e:8a:b8:d7:d2:c5:d6:27:b4:dc:0f:7c:
08:88:f8:a7:8a:d3:3a:05:78:09:03:89:58:90:36:
72:e4:ce:5d:05:ac:65:ad:f5:28:fb:6c:4b:ae:c1:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:81:40:28:BB:A5:A3:25:61:B6:D0:EC:76:C7:ED:EE:D1:53:B9:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3076ce9c-ab50-39fd-b9f1-1247cd332edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:85:ac:21:4f:02:8c:b8:bc:ab:b0:85:0a:a2:ba:cf:d1:a3:
d3:37:2d:a6:a9:a9:46:fe:1b:3e:a3:bc:92:18:a3:13:e6:66:
2a:07:aa:c2:4b:3d:d2:7b:44:ef:30:db:21:7e:ee:ed:9f:36:
80:ca:e1:97:c6:11:b1:7c:29:c2:b5:28:97:f0:f1:87:e2:e7:
c6:17:8d:f3:b2:27:41:83:67:85:dc:74:a2:d7:5c:76:66:4e:
b7:e2:29:79:b2:fa:47:7b:a1:d2:a7:3f:06:21:0d:6c:88:cf:
6c:0c:ef:41:35:22:6d:9a:c0:43:eb:45:71:01:9f:ed:ac:4d:
93:5d:bd:e7:10:36:b2:ab:9d:79:6a:69:c5:a0:7d:ed:22:0c:
41:1f:42:4f:7a:37:ff:4f:39:d4:99:d3:87:4c:9d:8c:12:11:
fb:6f:74:17:db:30:ed:c4:81:e9:36:b6:84:39:db:cc:b9:bb:
2c:8d:a4:eb:ad:2a:96:58:c9:79:54:3e:4d:a8:df:8b:a2:26:
74:e0:01:ed:f9:b8:a2:21:83:21:31:2d:89:40:9d:62:f1:9c:
ee:ad:c2:97:06:69:48:4f:4f:2b:84:c0:aa:e5:ee:1a:84:cb:
4e:03:78:3a:82:67:1e:22:02:48:5e:52:df:e6:f7:d6:9f:50:
7b:74:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:49 2025 by rpki-client