Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa
File: 473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa (raw, json)
Hash identifier: Dr0kDj5Sqh52A4Vs6YIy43PCO16NMAvGCP8wAD5BaUA=
Subject key identifier: 61:EB:8F:55:8F:E4:5A:F8:AE:74:C2:D2:A0:A2:B9:4A:ED:05:3F:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C109F28CC1E8482C57C5080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.230.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:9f:28:cc:1e:84:82:c5:7c:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=54404305-e819-4f95-8ba6-3376e8e79d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:2f:b8:a5:64:ec:7f:00:09:10:45:f8:18:
b9:b0:a7:bc:61:ef:9b:41:0a:72:6b:a0:ad:3e:01:
29:28:42:ea:3e:9a:ad:43:5e:2c:ea:2c:d0:d8:34:
c5:9b:ca:97:d7:f5:14:ab:a3:ac:32:c9:d6:67:25:
c1:ad:d7:d4:6a:f0:15:6a:fe:7f:21:ba:96:aa:5f:
fc:f6:9b:4a:eb:6a:56:bc:fe:95:c9:5b:39:f9:7c:
5a:bf:cf:e4:d7:d0:f3:2d:41:0e:bc:7e:a4:8a:5a:
4a:84:a6:58:5c:0a:17:5f:fd:8f:6e:90:43:44:2e:
d0:28:b1:98:14:f0:05:e6:8d:93:e3:dd:bd:19:20:
64:48:82:4a:89:52:a7:d5:aa:d1:e9:69:1a:87:d5:
c3:d7:90:d9:46:ef:12:eb:34:58:3a:a0:a1:0b:f2:
41:2b:54:bd:39:03:b6:ea:38:93:b1:ef:98:55:04:
1c:79:3a:6b:5a:3f:d8:bc:b7:73:5d:82:9d:a9:2b:
07:85:ea:a6:4f:55:3d:14:92:18:db:c8:77:28:72:
ad:2d:be:f9:54:ff:e4:49:e3:37:de:10:d6:22:3b:
a1:a4:b5:2b:6a:3b:fa:8a:c4:89:a4:e4:31:6f:9e:
9e:25:1e:3f:ae:58:4d:d3:da:d2:74:c6:33:35:7c:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:8F:55:8F:E4:5A:F8:AE:74:C2:D2:A0:A2:B9:4A:ED:05:3F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:8d:af:7e:77:f5:29:15:a7:2d:6c:18:72:53:74:eb:94:06:
ac:3a:f3:8f:82:d0:20:e3:8d:69:9a:c0:33:22:32:03:0c:ae:
14:2b:e1:46:3e:48:7d:4f:59:10:10:4d:48:a0:92:14:40:46:
ca:73:08:04:65:d6:48:9e:46:d6:c9:57:56:ed:15:e7:cf:3c:
3c:c5:bc:44:c8:b9:20:e4:f3:74:11:6b:0a:ea:2e:7c:95:76:
1e:11:90:85:71:05:51:73:3b:71:c2:24:a2:a2:88:43:1c:c8:
c8:60:9b:57:39:e8:35:9a:b2:1d:ee:32:5e:c5:f5:87:e0:7b:
e3:99:53:56:a3:a4:6f:ce:11:0d:ac:ca:38:8f:1b:8e:82:36:
ea:eb:ad:26:49:ad:bf:21:67:a5:58:10:ba:a6:46:90:00:0f:
95:fa:e6:54:9a:7b:af:2c:95:20:7f:3a:36:7f:55:d2:8c:ac:
62:63:c0:aa:73:f6:08:ea:ab:fc:96:a2:b4:e8:10:da:c0:07:
98:86:06:ae:0b:6d:22:dc:17:c5:5b:4e:ab:cf:3a:a6:a0:d4:
69:71:97:2d:7b:4b:5e:3f:77:34:b9:1b:7e:f5:87:aa:cc:12:
75:87:86:0c:df:0f:80:6f:5c:bc:67:76:05:40:b3:b9:67:0f:
15:7d:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:10:18 2025 by rpki-client