Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa
File: 3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa (raw, json)
Hash identifier: RBYo9lCHZTZpXYkaGcosq9gB1WYEZ5J3IVRrf0u4l3M=
Subject key identifier: 6F:FE:0F:65:25:AB:64:1A:DC:54:4A:BA:2E:A7:92:A9:BB:A1:EC:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FB23E854A261E732F70A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 174.170.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:b2:3e:85:4a:26:1e:73:2f:70:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e1e79083-8bad-4496-8cba-2f10401d8e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:73:99:55:ac:84:38:78:6b:41:a8:77:4b:
b3:24:e4:98:9a:b0:86:e6:ea:89:b0:7a:75:cd:6f:
ed:7c:18:ae:5a:81:e9:40:c6:ab:26:20:07:5f:e0:
b6:9c:79:8b:a8:df:9a:b2:f1:82:0f:c6:d5:08:bc:
c9:ab:90:db:81:44:71:ea:59:c2:63:3d:d6:24:02:
d9:98:b6:0a:0a:cc:3c:14:0e:3e:74:c9:27:4a:e4:
29:33:df:f4:dc:a8:2f:e6:55:f5:6b:4e:9d:d9:65:
55:7e:15:95:4c:7a:81:66:b4:19:7f:e3:b0:8b:50:
ca:9d:c5:2b:46:56:a7:38:6e:e0:ff:3f:f7:6c:fd:
44:b6:26:a2:38:12:7b:49:7b:43:d4:aa:34:a5:49:
91:87:c9:b5:3f:d9:cd:40:4c:b9:35:56:3c:db:2c:
be:7a:4b:6f:2f:a4:4b:4f:4a:12:92:13:2a:0b:33:
06:a7:ef:73:b9:78:f8:39:36:c1:94:f3:c0:2e:b1:
97:8d:f7:a8:d1:aa:93:52:12:3a:b1:57:42:bb:25:
ed:b3:2d:61:6b:2a:ba:08:9b:35:47:e9:51:69:20:
45:67:01:6e:27:09:74:38:48:74:31:a7:a6:0f:b1:
b9:a7:fc:5f:dc:66:4d:f3:bd:cd:62:1a:9e:0e:82:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:0F:65:25:AB:64:1A:DC:54:4A:BA:2E:A7:92:A9:BB:A1:EC:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7d4511-ac7f-34c5-9094-4538a8b21a47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:25:62:45:3c:94:6b:77:d7:db:9e:fc:15:ef:31:d9:e6:15:
bc:ed:37:cf:17:73:72:59:5a:e8:79:37:9a:d4:02:41:95:4a:
13:f3:80:3b:8c:6c:cc:ca:f5:75:0d:77:9c:f7:0b:ca:66:12:
c8:9d:d9:60:d3:2b:5b:9f:cb:23:c3:b9:6b:b5:67:42:01:75:
fd:8b:58:13:61:81:37:58:47:10:66:bd:37:a6:5f:a3:cf:af:
b3:aa:d4:3c:36:82:16:fe:26:ff:59:e9:b3:24:8d:ad:bb:ea:
03:6e:91:f0:86:72:9f:fe:ca:b1:3e:71:a3:ff:4e:20:38:c7:
8d:98:77:47:23:7f:30:1e:cb:59:fe:49:fd:04:26:7b:23:25:
b7:f9:95:4c:0f:3a:01:47:a7:2e:0a:1c:3d:b8:a5:87:b3:ec:
46:1e:26:fa:5c:50:0b:61:4f:52:f3:d4:1e:7f:02:6c:b9:cf:
08:3f:98:1a:de:6f:cb:a2:50:eb:ad:d0:f7:b8:e8:18:d8:fe:
99:8b:40:7d:aa:4c:2a:06:7c:79:85:86:5c:30:b1:60:3c:6d:
a9:2c:24:0a:05:eb:18:eb:d6:52:fe:5b:31:e7:92:1e:6c:27:
d4:85:8c:43:39:cd:c4:a7:3b:db:69:cf:e9:9b:7b:cb:20:08:
f1:2c:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:32 2025 by rpki-client