Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/546bc441-d5b4-3d88-802b-9e5408520c02.roa
File: 546bc441-d5b4-3d88-802b-9e5408520c02.roa (raw, json)
Hash identifier: 2xZMKy1EwzeUSL0T5al/L7MqDGsXF4AgqsZ0A3KQ3Xk=
Subject key identifier: 8C:69:9F:DF:DE:C5:3E:C2:17:4C:95:86:70:40:D0:16:4C:F3:6D:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C137780719517437A09BD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/546bc441-d5b4-3d88-802b-9e5408520c02.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 67.174.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:77:80:71:95:17:43:7a:09:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=96610e90-94eb-46c0-9f5d-775a7872a8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:58:88:26:66:4f:82:c6:af:2a:4b:40:d6:
54:b8:61:34:08:99:15:2d:7c:52:92:a5:dd:7f:e6:
64:58:88:ed:5f:0b:42:f6:b4:5f:04:c1:5b:90:31:
07:2a:43:58:9c:11:65:0f:ca:5f:a6:dc:f3:cf:f9:
3b:c5:4c:2c:fa:60:62:5b:3d:cc:ba:87:62:f3:53:
b6:ca:fd:1e:0b:b2:60:9b:1b:04:3d:90:8b:6d:4d:
df:7c:02:c7:45:72:72:2f:de:4b:ed:47:12:48:e6:
c4:6a:fe:65:16:11:bd:96:45:49:4a:4a:21:78:07:
e4:70:1b:9c:d7:9f:e1:b5:05:41:a7:b4:cc:0e:55:
d9:bd:2e:0e:eb:69:c5:5c:db:e8:d1:9f:05:90:0e:
e1:fa:b8:50:4b:ee:dd:e2:f4:69:34:e8:f1:2c:c4:
6c:4e:a4:ce:f1:63:ab:10:48:06:c6:7d:0b:f9:fb:
eb:50:91:e8:e7:67:15:ae:db:38:2b:b2:64:9d:ec:
18:e8:aa:77:a0:1d:81:29:cc:8e:7a:f6:b5:2f:ab:
96:84:35:37:b2:06:bd:9d:d2:6a:bc:f7:c4:a0:f4:
2e:10:59:51:54:9e:0d:37:07:f3:24:e8:b3:68:85:
18:fb:fa:25:92:a3:8f:de:43:ba:2e:fd:59:8f:b2:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:9F:DF:DE:C5:3E:C2:17:4C:95:86:70:40:D0:16:4C:F3:6D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/546bc441-d5b4-3d88-802b-9e5408520c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.174.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:42:83:ac:ac:f3:ef:8a:2f:3f:af:42:8b:93:db:cc:41:aa:
60:aa:aa:cc:f5:f7:fe:27:24:67:69:db:f1:7e:d8:49:62:be:
3b:a5:b8:b4:5f:7f:46:04:ec:d1:ab:79:83:9a:3c:6d:e3:85:
4d:3b:2f:d3:15:8b:42:97:25:91:c1:32:d2:a7:f8:48:46:c7:
37:92:8c:26:67:71:bd:10:4c:81:0d:2d:6d:47:f1:43:4e:a2:
84:07:49:08:fe:09:01:15:d2:2a:83:12:c9:6b:36:67:92:0b:
8c:7c:6a:0d:73:31:6c:cc:73:2b:9a:28:ae:d6:48:c5:e5:29:
ed:a5:e0:de:2d:1d:cd:18:db:bc:54:28:3c:8d:17:55:03:dc:
e9:10:fc:82:01:53:a1:5e:1a:98:0e:62:d1:8a:77:f2:a1:23:
3b:bd:79:3e:c1:cd:b8:be:b3:6e:60:14:f8:50:a8:39:b1:78:
71:dd:58:a9:85:41:b9:95:c1:34:59:dc:df:ad:90:26:26:f7:
f9:6e:b4:22:77:af:ba:97:b1:c6:f8:8f:a3:2a:ab:3e:c8:de:
ff:15:46:8e:bd:34:2c:81:1b:9c:02:27:82:19:b8:91:47:67:
92:42:95:0d:32:07:0b:f1:c9:eb:ff:df:e3:0d:ff:f9:f7:86:
8d:99:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:38 2025 by rpki-client