Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d7ae73-2953-34e2-a121-3b69941ca548.roa
File: 35d7ae73-2953-34e2-a121-3b69941ca548.roa (raw, json)
Hash identifier: wafI+R1+77qxP9R8XXl1LzwU6w7UedhKJHK1bPjIS8E=
Subject key identifier: DD:26:98:C1:92:93:13:41:58:32:C2:92:40:88:0B:9E:A2:66:05:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D3A3AF0C3A8D1C75B280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d7ae73-2953-34e2-a121-3b69941ca548.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.173.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d3:a3:af:0c:3a:8d:1c:75:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4dc46501-8581-4f48-8aaf-37fcbba6599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:ac:81:7b:e0:a6:92:aa:14:a6:a4:39:e4:
8b:f7:5d:1c:8f:1b:3a:b5:34:a9:c0:7c:f7:ec:db:
ae:66:65:3f:01:78:11:51:df:26:d1:8d:5d:0f:11:
8e:7f:75:2d:1a:5d:e9:1c:7c:0c:56:c0:e0:63:49:
2b:be:bf:8a:4f:2e:f9:57:7b:ee:59:d9:9b:a9:74:
82:cc:45:57:53:d2:9c:70:d9:45:30:36:2b:74:35:
63:9f:65:73:2e:91:82:08:bd:0e:40:6b:b1:31:a9:
6b:97:d9:43:b1:0f:63:e5:0c:87:6c:ce:b2:ef:63:
1f:46:c9:32:2d:83:0f:53:a7:7d:83:ac:b8:25:35:
27:07:ac:3a:95:20:7c:ee:66:79:88:03:09:44:55:
ca:0e:d5:f7:c6:b0:47:6a:f0:76:27:1b:bc:57:ab:
d9:33:86:d5:7e:3e:a3:3e:23:c6:08:d8:44:e3:b8:
39:6e:f5:ee:86:21:1d:1c:af:e4:6a:11:12:7f:ab:
76:e2:d4:eb:29:68:4e:11:1a:ba:86:3a:b7:14:2b:
0c:41:45:2b:64:8f:ba:3e:41:27:18:8a:28:91:a7:
ae:28:52:b7:ad:38:a1:da:cb:b9:65:85:8b:85:94:
ef:f4:2c:d0:6d:b9:ac:97:fb:61:a4:28:cc:45:7d:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:98:C1:92:93:13:41:58:32:C2:92:40:88:0B:9E:A2:66:05:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d7ae73-2953-34e2-a121-3b69941ca548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:48:4f:83:6e:01:40:b7:b8:7e:43:0b:60:c6:d3:95:00:82:
41:12:25:3f:3a:c9:17:2c:a3:2f:85:b6:0c:51:de:48:51:44:
74:94:1b:4c:f1:2d:92:c9:f2:fc:a8:66:56:7b:62:70:c8:1f:
94:a4:bb:6b:8a:c9:1a:3a:9e:6c:57:e5:d9:5e:dd:5f:2e:21:
14:d6:bf:af:af:20:3a:da:57:dd:54:19:e9:fd:06:d9:88:52:
b1:fa:f8:91:c4:e2:69:3d:76:3e:ae:30:52:ca:f8:62:6f:7b:
f9:97:58:fe:ab:d0:86:c7:0f:64:2f:75:a2:b2:8f:be:55:0c:
7f:85:ea:bd:2a:0b:5f:a3:f5:46:17:80:b7:57:e3:5f:1d:c9:
34:5f:a1:eb:a3:08:cf:d7:ec:91:13:5f:52:1c:95:08:da:7e:
ff:f1:30:40:77:1b:24:b9:68:90:dd:b5:f3:5b:01:c9:a6:e7:
54:0c:29:49:85:f2:06:81:b3:94:7e:99:d6:3e:7a:fd:48:73:
19:45:d3:10:60:b6:75:f1:02:89:be:b6:04:ac:5a:73:38:2b:
6e:08:19:24:d9:62:b1:f5:38:b7:4a:9d:7c:c9:e7:38:e7:b0:
bd:a5:7b:2e:06:c2:28:da:fa:3f:b0:b5:77:9d:78:75:f1:a7:
9c:5a:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:43 2025 by rpki-client