Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42831c87-e4fb-380d-a342-171f6e4e6adb.roa
File: 42831c87-e4fb-380d-a342-171f6e4e6adb.roa (raw, json)
Hash identifier: Kz806BmLlxkEqkrZG/Rx/VVDEEG5i3RssTTQi9HD35A=
Subject key identifier: 6A:12:7F:94:15:86:C4:A4:58:6F:53:C3:92:06:34:7B:92:B9:7D:2E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C121ECFF11F13F2AF1C3FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42831c87-e4fb-380d-a342-171f6e4e6adb.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 174.166.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:1e:cf:f1:1f:13:f2:af:1c:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2ad7932c-13fc-47c3-98c8-2224300210ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:86:74:35:39:6e:e3:ab:a6:f1:53:3c:19:
15:b0:05:b4:ff:cd:0f:19:d2:c3:a4:eb:84:29:1a:
1c:a1:a1:20:b9:d3:9d:22:02:59:3c:1a:d7:27:71:
df:92:0e:2f:03:61:56:06:43:ef:a9:e2:f2:aa:19:
af:6e:93:ed:70:85:80:59:bb:25:32:6f:37:c6:fb:
3d:b5:e0:56:29:ac:ac:8c:aa:91:44:3d:a5:08:34:
65:cd:8f:93:93:97:9b:61:7a:d4:6b:fc:d8:9d:3a:
77:89:4c:2b:7f:2c:64:7c:62:d3:4d:68:93:16:a2:
11:10:09:ea:26:5c:34:3b:4b:8f:c1:04:13:3d:f1:
15:de:d4:bf:c1:36:92:27:dd:7d:d5:c7:30:03:6e:
3e:5d:62:e6:1e:74:5e:cc:c6:73:f1:b3:bf:c2:bd:
31:12:ec:43:03:82:ad:ce:a7:c2:71:71:82:ec:4b:
5c:21:1f:b0:55:bd:4b:9d:14:3b:62:83:19:56:b3:
b0:e1:45:07:14:28:9b:8e:ee:d5:42:f2:7a:e0:78:
57:46:36:56:f4:d4:d1:3a:50:74:00:53:7e:d9:36:
4e:aa:b0:3c:6c:35:b7:2d:fd:f9:21:f0:e2:a5:89:
3d:95:da:3a:c9:4c:31:c8:8c:36:33:5b:6d:11:ba:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:7F:94:15:86:C4:A4:58:6F:53:C3:92:06:34:7B:92:B9:7D:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42831c87-e4fb-380d-a342-171f6e4e6adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.166.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:49:7d:85:78:57:53:de:09:3c:4f:40:c0:38:73:11:c9:66:
37:7b:b9:9a:f6:e4:6a:b6:7b:e5:ba:b2:0e:75:b4:46:de:e0:
6e:b2:59:e8:70:4f:1b:04:84:70:28:01:ef:37:fe:80:0b:45:
a0:6c:ef:e5:35:c1:a0:9b:14:30:f6:ff:23:20:e2:71:04:fd:
d7:4a:75:f9:0c:2c:f2:69:41:9d:8e:24:5f:a1:2c:f0:54:64:
60:26:71:94:f9:96:41:ce:85:c7:87:85:d2:7d:7e:cb:a7:0d:
e5:ee:03:8c:d6:25:2f:ae:04:c6:fd:8c:fe:d3:f5:62:96:bc:
1e:33:1a:23:67:a9:43:7c:be:03:b3:b6:e2:99:c0:4d:d2:1a:
a2:59:9a:a0:72:b3:f9:48:4b:ad:3b:95:0c:a6:05:8e:a8:a7:
39:30:1b:dc:4e:71:1d:d0:f3:c5:62:37:68:eb:b7:c1:81:d9:
57:6c:75:8a:d6:3f:1b:6c:bc:00:6c:e1:3e:80:10:de:e9:23:
f2:b3:35:30:c3:19:43:98:6e:b4:17:99:f1:9e:42:93:2c:46:
bf:92:5e:75:d3:29:fc:28:f0:c1:8c:cf:6b:d3:60:b8:65:05:
e0:fc:06:47:01:c6:93:63:d8:3f:bb:66:57:fa:63:bf:81:ec:
52:42:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:05 2025 by rpki-client