Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a33834-89bc-3c55-8d7f-4ca39e62f632.roa
File: 35a33834-89bc-3c55-8d7f-4ca39e62f632.roa (raw, json)
Hash identifier: dghOEc13C9KDWqSNIX76RNF2SfWP3vyPdKh9kuVMOR0=
Subject key identifier: 78:C0:10:09:44:35:A2:A0:EC:77:94:CD:E1:A6:6C:14:73:73:16:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C109D9E27527A461FF32180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a33834-89bc-3c55-8d7f-4ca39e62f632.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.59.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:9d:9e:27:52:7a:46:1f:f3:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2e1784a9-a2b4-40d9-90f7-25039abaecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:3a:33:5e:23:3b:95:1c:ce:23:b9:18:08:
71:53:bf:da:10:5a:14:cb:ad:25:d7:9d:47:4a:da:
e0:76:ee:83:bd:7b:eb:08:da:9e:a8:65:a2:9d:d7:
50:1a:d6:5e:d1:28:1c:bf:ac:46:15:97:ee:6c:0c:
28:19:ca:a1:34:cb:ad:3a:67:a7:17:60:25:c7:0c:
2f:14:24:7a:a4:47:3c:94:91:65:58:89:50:ca:49:
76:96:5d:60:98:ba:3e:a8:c4:89:ce:76:8d:85:65:
04:73:e4:30:4f:80:a7:70:fd:39:50:e4:9c:83:25:
ab:7d:13:a7:16:49:b5:69:c2:05:d9:bc:7c:3a:65:
aa:1d:66:69:45:8c:d5:6a:46:d8:f1:0f:46:6e:8c:
31:6d:a7:c1:2c:e8:e7:bf:d6:5d:72:b3:a6:f5:4b:
aa:79:b6:6d:d7:50:d6:d1:b3:87:f7:f1:6c:78:09:
07:49:19:be:ff:24:b1:85:3c:8e:9a:47:f1:53:75:
98:19:14:20:13:a5:98:f4:99:20:89:85:90:94:05:
b6:b9:d6:8a:61:61:5d:9c:5d:36:94:33:e6:bc:30:
a2:a2:c5:44:f2:4e:c4:bb:71:a5:97:fb:1b:7d:2c:
fd:69:86:17:01:5b:4d:b5:a3:c5:f9:2a:84:56:0e:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:10:09:44:35:A2:A0:EC:77:94:CD:E1:A6:6C:14:73:73:16:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a33834-89bc-3c55-8d7f-4ca39e62f632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.59.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d6:34:24:e1:b0:61:d2:40:f7:e3:16:87:4a:0f:6c:d4:4f:
b1:27:f3:bd:c4:d5:e5:80:66:dd:91:b6:34:d3:08:ef:34:77:
a5:8e:f7:1b:f2:4d:e7:d2:04:0f:79:56:8b:93:1d:a6:e1:9b:
ff:08:24:00:1b:f3:82:73:5b:47:b6:3b:14:84:da:69:d4:d8:
af:06:15:dd:e5:09:9f:4d:a8:7c:10:fa:e0:b0:9c:a3:30:e1:
d1:8f:d6:da:de:5b:87:73:67:ab:29:a6:55:b0:44:26:8c:b9:
fa:4b:0f:dc:62:68:7a:85:e7:fa:fe:f4:6c:11:7a:53:a4:a7:
56:53:aa:e0:a6:e5:42:8f:4c:49:aa:f7:36:78:cd:e5:93:dd:
36:8e:aa:37:8f:15:72:8c:ae:17:29:fe:73:37:ad:ec:50:5f:
b0:f9:d2:d6:c2:4d:e2:0e:d2:1f:74:f4:de:11:40:c1:f7:20:
71:0f:a9:ef:03:aa:72:50:f7:ee:c3:69:23:e5:be:b7:14:df:
e5:1c:61:91:43:00:6c:0b:7c:de:da:db:ee:f6:ec:32:a0:82:
f4:5f:f9:dd:99:11:90:a8:49:33:81:7e:20:71:9b:97:a0:93:
ec:5e:c5:de:a0:23:e0:33:dd:2b:0f:81:a7:d0:88:7d:54:4a:
d4:fb:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:53 2025 by rpki-client