Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa
File: 4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa (raw, json)
Hash identifier: 5CA1rPSwEQ5mByvoYAqEwtDxmg+ZcYALmicytOAGCl0=
Subject key identifier: 02:E6:B3:08:61:05:0F:E2:55:B2:A8:DB:BA:CD:FF:69:AB:99:A5:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E60D0EA2B597D345C41C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 174.167.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:0d:0e:a2:b5:97:d3:45:c4:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=295637b1-8736-426b-a8a8-2eba46988d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:49:16:4e:cd:7e:82:85:6d:34:15:89:8b:
72:79:80:8f:a2:3c:25:08:fd:42:8c:b8:5f:5e:81:
00:66:3c:e6:60:69:70:8b:96:bf:d4:cf:d4:c6:fa:
ef:92:a7:37:ab:d0:e6:a0:4a:9f:5d:09:1b:8a:06:
f0:31:4b:86:9b:57:94:38:73:0d:8d:cd:df:a6:89:
6c:56:03:68:44:15:ca:e2:9e:52:9d:d1:43:b6:a8:
91:8a:40:36:50:70:aa:1a:31:06:8a:4a:65:d1:16:
99:39:f0:55:08:d4:95:e8:1d:a7:74:7b:df:63:5a:
c9:9d:1e:c5:6a:56:d6:b9:05:4f:71:fa:3b:eb:fb:
4c:b8:0d:ed:3d:71:a4:0f:04:0a:b0:71:51:57:d8:
57:98:96:f4:73:55:0b:cf:63:0d:36:1b:d8:c5:cf:
f1:4e:d4:70:73:b1:c2:12:d2:58:2d:11:ba:fa:ad:
ca:9f:df:b8:64:4a:25:45:54:82:94:9e:9a:34:32:
6a:32:56:d7:5c:6f:ff:b5:52:5b:80:a4:48:a0:78:
15:2c:1b:2e:d8:c6:98:33:8f:9c:b9:1c:c6:09:ee:
81:77:b1:78:a2:be:62:40:be:b8:5a:72:96:79:78:
b8:18:8b:b1:8f:e6:87:02:34:b9:c8:3d:14:ae:53:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:B3:08:61:05:0F:E2:55:B2:A8:DB:BA:CD:FF:69:AB:99:A5:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.167.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:8d:71:b1:17:f0:67:0a:dc:29:40:ee:12:6b:95:a2:c7:79:
d9:83:ca:18:02:e5:60:66:78:39:48:e2:5f:27:03:e9:76:5d:
ac:2c:f7:03:b7:e2:c4:71:25:4a:57:26:7f:c4:5d:d2:af:d1:
ad:e4:64:0f:42:f7:3f:a6:95:9a:bb:e9:9e:2a:db:a0:ae:9c:
36:13:c1:40:29:c6:59:d5:52:6d:21:7b:80:db:fc:a1:c2:b7:
05:8c:ac:a5:a6:e1:62:b6:ca:7d:fd:b7:59:b2:77:65:fe:0e:
8b:56:99:14:06:ee:f2:ac:dc:ff:da:3c:37:18:01:8d:72:4e:
ce:4e:51:c2:04:bf:c5:bf:f8:15:07:e7:97:1b:4f:7c:8f:8a:
2b:a8:83:60:72:30:69:ed:b1:f4:f8:e6:4c:00:d6:4d:38:06:
b8:14:e2:47:3a:9b:93:36:a5:fc:28:19:72:5e:9b:2a:90:7b:
64:ed:69:06:a5:d0:1a:6a:7d:3d:83:c3:6d:84:a1:d3:41:57:
91:5f:9f:e0:23:54:68:79:76:29:32:69:a9:f5:e6:61:08:87:
cf:50:41:ba:76:50:ef:b0:e1:04:98:90:a7:36:47:29:cd:8c:
69:4e:8e:d6:06:3f:21:dd:fa:74:fd:84:9e:98:2c:97:1a:57:
6c:1d:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:40:26 2025 by rpki-client