Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fdd27b2-b3aa-344e-aa81-5152d56f603f.roa
File: 3fdd27b2-b3aa-344e-aa81-5152d56f603f.roa (raw, json)
Hash identifier: ZzzCC+7heWWOUX/Ob4YLwra6MfLzrKUjtDU0xWSC/f0=
Subject key identifier: 72:7A:BC:D4:E7:DF:25:8B:3A:B4:E4:21:D7:85:A7:82:2B:99:C2:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10EFB5C0CE108C3AC2C900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fdd27b2-b3aa-344e-aa81-5152d56f603f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.194.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ef:b5:c0:ce:10:8c:3a:c2:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=056d2d9f-c455-49e1-a37e-317e7cac8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:bc:e3:fc:74:bf:65:00:62:73:d3:91:89:
2e:09:e2:97:e3:92:23:05:8b:8a:6b:80:b6:53:31:
d2:24:86:45:0d:ad:f8:09:18:20:e4:46:cc:b3:1c:
74:d1:bf:df:fe:4d:7e:ba:08:5b:61:6e:08:82:86:
36:5b:92:72:e3:3c:10:59:77:70:35:a5:83:c7:1a:
5e:a5:e5:a1:fe:6a:03:cb:b2:a1:8d:94:e0:f5:e2:
e2:da:24:f6:51:e3:ff:99:6f:7b:39:5c:5a:1c:68:
01:b3:e8:43:47:14:35:f5:37:23:1c:e8:f2:f6:dc:
f9:ba:be:fc:47:8d:ee:ca:f1:5d:c8:85:ca:87:f3:
e0:a0:fb:c5:d2:7d:97:bd:ce:53:71:73:74:06:3b:
81:19:f4:ce:1a:b4:f4:93:b5:18:f4:f6:80:c3:3a:
8a:95:31:a0:07:98:64:1c:82:ae:c7:43:17:1f:60:
57:2f:ac:02:b8:c1:3c:05:38:b2:e8:57:28:14:df:
96:a2:b5:08:35:da:38:9a:46:5d:ef:b0:13:8f:64:
8e:dc:43:5d:ae:ad:b1:4a:c3:13:dd:40:b9:7d:aa:
72:b9:ce:49:56:03:6a:4d:32:a4:7d:57:7b:36:da:
5e:d7:d3:47:05:64:77:fa:c1:1f:9f:36:8d:ad:89:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7A:BC:D4:E7:DF:25:8B:3A:B4:E4:21:D7:85:A7:82:2B:99:C2:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fdd27b2-b3aa-344e-aa81-5152d56f603f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.194.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d7:59:cb:90:28:de:de:c3:9e:7e:47:86:a3:dc:1a:ca:ae:
c3:01:40:45:4f:e4:2c:29:75:43:bf:34:2c:16:ab:59:0b:f4:
25:c6:f2:02:93:75:97:72:50:f3:18:ca:02:3f:95:1d:e7:7b:
53:96:64:13:2b:c6:1d:66:66:8a:a4:ac:b8:b8:a6:cc:78:8f:
42:ef:87:03:56:66:fb:1a:22:72:26:b0:79:12:7f:cf:04:11:
cc:bc:45:0e:d5:e0:92:20:fe:53:59:d0:90:00:b8:08:dc:47:
ef:97:54:34:57:b2:7a:44:a6:ae:06:1a:45:e5:48:e0:3c:42:
d9:e9:0e:ea:31:79:d5:51:fc:6c:c3:e1:67:91:26:3d:19:ca:
2f:68:37:58:53:a6:2c:9a:fd:63:25:fa:5e:af:1a:23:b1:07:
61:83:f0:b6:53:ee:5f:17:8c:40:b6:5e:45:a2:2e:a9:a2:c6:
76:8e:23:b7:18:4a:6c:a9:a8:64:ad:57:09:7c:19:3b:f5:f4:
ce:40:72:2b:e3:9a:68:b9:5b:13:67:e3:5e:ad:81:26:5e:a6:
91:c9:db:66:35:d2:08:ab:6b:08:12:eb:d4:0e:67:4f:3b:94:
da:f6:ea:c5:a6:dc:73:f9:e0:18:03:34:cc:33:9c:ab:95:af:
2e:22:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:58:17 2025 by rpki-client