Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa
File: 3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa (raw, json)
Hash identifier: fY/uywudpm6rHwvvLt05u5N/eSdjoGl1Xe/BgnjmR6E=
Subject key identifier: 4A:74:CD:BB:21:33:05:BB:86:37:6E:8D:63:73:95:4F:53:6E:40:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CFCF700D311FB4C9A9300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.170.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:fc:f7:00:d3:11:fb:4c:9a:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0dd447ff-9633-4ebe-b5df-2d4c65df4262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:f8:6c:e0:35:e5:6b:79:4a:60:fb:8b:d0:
62:cc:fc:52:1b:60:09:b1:9f:f4:9a:26:5f:d9:56:
26:db:cf:09:59:46:45:74:a6:04:78:3c:f2:81:21:
53:bc:7b:bb:f6:84:79:06:6a:ca:70:fd:fc:33:65:
1b:96:ad:9f:ec:e9:dd:3a:eb:a3:79:e1:1a:a2:fb:
a9:7d:2b:08:7c:03:7a:2f:f8:d0:70:15:73:40:4c:
9c:6a:3a:20:07:15:2c:a5:5e:33:b4:b0:91:65:6c:
50:e4:93:5a:33:42:8c:78:a1:c8:ef:9b:1c:69:fb:
17:31:5e:8b:ac:03:27:05:13:db:3e:3d:1f:0a:db:
9c:18:8b:fa:66:c1:ae:27:01:ee:aa:53:14:f5:aa:
8a:03:21:66:82:f5:28:91:b9:0e:20:7d:82:12:f5:
31:d5:4b:fb:61:72:05:70:ca:da:17:82:32:72:ac:
29:7c:01:4c:8e:13:aa:4b:2c:29:9a:9f:68:6c:c6:
ed:92:d5:d2:fe:98:d6:c5:7d:b7:8a:62:66:b5:ac:
a2:51:8a:64:a8:a1:1a:3e:cf:b4:91:74:b4:9d:97:
7a:4b:bb:a0:c1:14:bf:74:b4:69:bd:fe:83:b2:02:
0a:da:f4:e8:7c:3f:d0:4d:c2:3f:95:6c:3f:c5:dd:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:CD:BB:21:33:05:BB:86:37:6E:8D:63:73:95:4F:53:6E:40:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.170.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:77:54:69:9e:f9:75:0c:f3:e8:af:cf:33:98:44:00:12:ad:
88:76:81:28:b8:e7:b3:28:e5:a5:05:a6:6f:19:f4:a8:a9:31:
5e:45:93:d8:78:24:f7:6d:92:f5:bb:9a:db:4c:31:c7:e0:c8:
6b:97:cc:0f:0f:05:15:24:44:a8:a1:ea:bc:59:cf:f9:cd:1d:
ac:53:4f:e4:38:62:5f:a6:a7:0f:e9:88:81:de:fe:d0:a3:01:
05:e9:3d:4d:60:4c:bf:8b:82:55:ad:e6:cc:9f:09:af:73:30:
43:31:cd:93:43:2e:2d:53:46:56:b1:b8:2b:b0:3c:0b:5d:3c:
6e:14:0c:fd:dd:25:79:72:41:94:01:ad:6d:af:f7:02:15:5e:
bd:25:49:59:f5:93:47:56:b7:af:d2:47:e0:13:95:1c:71:40:
39:f8:14:81:55:3c:00:c9:50:92:a2:13:d2:76:c4:f9:69:63:
56:f3:eb:2d:fa:5d:78:47:3e:e1:49:ab:01:ac:d3:7e:d5:24:
34:43:f6:8d:8d:f7:78:eb:70:d6:32:5e:96:fa:09:59:5e:5d:
6c:83:07:e2:a6:42:78:e7:27:67:37:d3:b5:48:72:d7:22:4a:
30:a3:77:3d:88:fb:4a:c8:31:72:15:c6:e1:f1:87:ca:2e:54:
39:d1:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:10 2025 by rpki-client