Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
File: 5159f522-faa6-3f17-bd17-8b471a149541.roa (raw, json)
Hash identifier: dWzXYRMQp/z9AU98vCVfBnsKg6IOHkDlxZ83xCe1XU4=
Subject key identifier: EA:E8:C7:DA:54:23:1A:58:56:50:9B:46:36:58:17:DC:3D:CB:30:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C109DE51F555FA1DC8A3BB8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.224.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:9d:e5:1f:55:5f:a1:dc:8a:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7ab2494d-c47b-429a-9a4a-5a8679f7404a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:85:48:4f:0a:f2:5e:85:08:09:9a:d3:6d:e2:
87:9e:ea:93:50:3d:ed:85:4f:c6:ce:50:74:df:3e:
dc:da:a3:18:35:30:f1:b7:11:18:e5:20:72:2f:05:
14:a6:8e:7b:b4:aa:eb:0a:96:77:d8:da:05:30:f3:
cb:39:93:5f:ac:e2:74:b5:6f:d6:1e:f5:da:08:c5:
ba:cc:81:64:bd:26:f3:58:78:d8:81:e3:84:91:5d:
26:92:92:08:6e:74:01:b2:20:34:f2:85:32:c8:b1:
be:11:01:b8:7e:8c:20:90:90:81:6b:b6:5b:52:20:
c4:28:b9:2f:cb:d9:0d:88:29:90:91:6e:2b:50:19:
b6:7e:26:19:2c:cc:ea:79:7f:00:1c:f7:db:73:e8:
18:b7:d8:49:b4:78:e7:06:09:95:84:a1:74:a4:51:
fc:74:f6:dc:fa:c2:0e:3e:54:7d:00:6d:23:17:d0:
ac:e6:00:04:b2:74:20:4b:44:83:88:d7:4b:f7:1d:
9d:51:63:39:eb:4e:b6:4f:76:1e:1f:f7:95:d9:0c:
0a:78:3f:9d:c4:72:67:ce:9f:9f:ed:52:45:e5:b4:
87:bd:6c:ae:f6:47:60:e3:0b:b7:df:35:a5:a3:2e:
f9:18:df:2e:08:88:2f:c8:6e:63:db:32:4e:5d:87:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:C7:DA:54:23:1A:58:56:50:9B:46:36:58:17:DC:3D:CB:30:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:3f:93:fa:66:1b:bc:46:c9:a0:9b:24:3b:4a:48:be:d1:4c:
24:c2:50:8e:20:0f:63:4a:c6:52:83:4f:3f:4b:47:9a:a9:f8:
c9:8c:e6:e5:23:fa:c2:bf:e4:70:e8:d6:4b:e3:80:ed:e4:d8:
fa:5d:3b:dc:2f:a5:df:cc:9c:5b:bf:46:3c:10:eb:36:fa:3c:
72:3d:db:ca:4a:c3:e6:14:88:4b:e4:7b:fb:6b:da:5b:61:c5:
ce:08:01:b9:8b:94:27:cc:22:0e:5a:12:e5:f0:6f:2b:ac:97:
d4:dd:21:32:6b:19:41:17:0f:0d:4f:72:1b:46:a1:57:04:6e:
5a:be:0b:62:23:2c:80:82:14:8c:c7:0c:ac:a9:05:64:ff:f8:
44:72:cd:65:c2:27:dd:7b:ad:75:14:d1:37:68:1e:9a:a0:9b:
a7:f5:85:22:fe:98:fe:eb:3c:35:a8:7f:dc:af:f4:30:f2:c7:
8c:6f:d4:f8:71:43:dd:53:24:80:99:8d:fc:23:c6:7f:62:34:
82:d5:90:70:10:a2:a8:ea:2b:42:59:30:ff:fd:56:2c:20:75:
8a:0b:a0:44:44:e6:af:82:80:57:81:11:b4:93:88:e6:6f:ab:
a9:67:75:51:1b:8a:ac:bb:87:0a:d1:43:ee:fb:3b:5c:b5:62:
66:25:12:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:09 2025 by rpki-client