Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a48e493-df1c-3eda-a806-60ea854e58f1.roa
File: 4a48e493-df1c-3eda-a806-60ea854e58f1.roa (raw, json)
Hash identifier: QeYxLMHMeL+bQJj1jhysLrwhVN2FsgOaeJCPY8G44PQ=
Subject key identifier: 61:56:9D:EE:39:BE:84:96:60:21:21:6B:2D:5B:FA:A7:9A:A8:E3:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C109FD6C959A50F2A26F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a48e493-df1c-3eda-a806-60ea854e58f1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.230.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:9f:d6:c9:59:a5:0f:2a:26:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=eb2a0e02-575d-4dcb-b7ea-e2306cc0147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a7:96:29:64:a8:d1:60:b5:df:6d:08:0e:7c:
ef:2b:1b:c0:aa:be:c8:2e:d3:fb:eb:7c:a1:be:d2:
d8:ea:6d:74:22:65:e2:b6:58:57:48:b9:fe:ee:c5:
51:42:a1:04:3d:9b:b2:e3:53:30:7d:bf:c9:60:f7:
54:c3:5d:4a:b1:aa:77:cd:e6:0d:e0:bb:b6:6a:9e:
8b:c8:89:51:0a:c0:8a:e9:36:19:99:a7:01:6f:9f:
ea:88:70:02:3c:f2:c9:09:89:09:47:de:5d:bd:71:
5e:2c:78:1c:ac:49:5a:28:0c:c2:e1:6f:46:d0:6a:
9f:21:2f:7e:79:54:9c:e8:61:96:24:07:1d:e6:b6:
94:7c:ec:8e:1d:23:40:47:f1:cc:9d:67:3d:00:f4:
0e:e3:88:e7:dc:79:37:1c:7f:c6:d3:73:46:ed:02:
8b:b4:2d:87:56:5a:1e:58:d5:be:ef:7a:a7:61:42:
9a:52:c4:f3:c2:5c:f9:0b:d8:4e:4a:ba:6f:3d:70:
b8:a2:59:55:92:e4:16:e9:2e:ce:ec:85:c6:68:9e:
f8:29:d7:12:86:80:70:bf:fe:0b:49:c9:cf:17:d9:
75:48:72:02:a2:f1:3e:9e:d7:00:12:46:cf:19:23:
aa:b8:44:44:e1:6e:7f:64:3c:43:60:2e:90:2c:8f:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:9D:EE:39:BE:84:96:60:21:21:6B:2D:5B:FA:A7:9A:A8:E3:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a48e493-df1c-3eda-a806-60ea854e58f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:2a:50:e7:17:6b:ed:28:27:50:6d:9f:11:af:45:30:e2:7e:
19:d2:0d:da:4c:bf:0e:a1:14:ac:b9:9c:bb:f8:d3:d9:59:a2:
5e:b2:e6:0e:8c:aa:69:70:f1:0a:b9:12:af:f5:f7:37:9f:74:
e9:4b:f5:21:37:97:1f:ee:84:89:4b:f8:0a:39:90:c6:0c:3f:
29:ad:54:89:7b:ea:cf:bf:6a:90:8e:42:d6:9f:0c:38:37:e5:
e8:10:b8:1c:1a:c8:a9:fd:93:47:71:a2:0c:7c:ce:ce:54:51:
17:fd:dd:79:b6:f2:a2:f1:c8:db:ce:a5:3b:5d:0a:c4:29:29:
f7:30:21:25:02:da:f3:ac:dc:30:95:cd:a2:9f:20:32:5b:9e:
51:76:89:f5:c5:2d:24:bc:11:ef:26:03:3b:ce:b8:57:67:ab:
a8:df:76:f0:41:3d:cd:9b:b5:0d:02:03:86:af:3c:ec:cc:a7:
20:7f:67:92:78:6d:0b:7a:78:d8:ce:90:b5:25:1b:ff:bc:69:
a3:a8:f5:24:a7:8c:cb:9d:b7:48:85:9f:6a:d8:38:02:50:1f:
50:bc:7c:95:3c:c2:e2:f4:bc:dd:e7:a4:cd:4e:1d:61:45:92:
73:10:a9:e7:0e:4c:d0:40:4b:27:9f:90:9f:4f:e8:7b:40:f8:
0f:4c:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:36 2025 by rpki-client