Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/575a602b-8c8b-34c1-b03e-4b44e3f0f8b8.roa
File: 575a602b-8c8b-34c1-b03e-4b44e3f0f8b8.roa (raw, json)
Hash identifier: 8fA8PLWJpqTMvEO+9itj8UDhpd1pUkl0N9nSBbbJPzA=
Subject key identifier: 9D:25:46:30:86:D7:D0:A5:64:0C:7B:7A:33:A0:43:71:06:F1:23:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DD3FEA5AB16F232C94600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/575a602b-8c8b-34c1-b03e-4b44e3f0f8b8.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.233.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:d3:fe:a5:ab:16:f2:32:c9:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=522b83d0-2e90-4c75-9f94-4b3e0a80fd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:5d:5b:d2:ee:67:91:ab:d7:29:37:ff:a0:
92:fa:52:0f:18:39:89:2b:fd:bd:3c:49:a4:c3:1e:
61:61:b8:79:f7:b0:4b:c1:aa:fd:22:8b:e9:7e:8e:
f4:ed:0b:d1:83:1f:22:07:ae:91:d6:e7:66:ba:b8:
b7:57:6e:55:eb:b7:e1:33:f2:71:5b:ea:2e:77:2a:
51:5b:89:70:46:72:2c:dd:2a:4c:b3:27:1a:35:83:
d5:c3:3b:e3:4d:b9:44:0e:46:fb:6d:c1:e4:07:1d:
fa:08:06:5c:7b:ee:2b:85:6b:a4:ae:68:cf:b0:fc:
44:9a:50:ca:f3:b7:8a:5f:fb:65:79:06:ab:0f:61:
fa:87:1e:cc:b8:b2:01:44:8f:10:63:46:94:2b:48:
20:da:2d:bc:6d:fb:af:ef:77:09:7a:14:b5:3d:69:
81:2e:f9:a3:6f:09:26:0a:78:f0:95:93:08:ae:e6:
54:09:85:69:91:43:ca:c3:06:0c:74:e4:e7:c3:48:
3e:11:96:95:43:8e:2a:43:d3:c5:48:1a:1f:dc:34:
61:68:39:b5:73:6d:bb:1b:5a:93:93:6e:1a:7f:4d:
bb:c8:ca:4e:59:61:42:f1:4d:7e:fe:ee:ad:cb:b3:
2d:7e:7f:fc:32:bc:6a:3a:f2:fe:66:98:f3:8e:3f:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:46:30:86:D7:D0:A5:64:0C:7B:7A:33:A0:43:71:06:F1:23:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/575a602b-8c8b-34c1-b03e-4b44e3f0f8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.233.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:5b:89:65:cd:a7:45:9b:80:cb:80:08:eb:f0:f8:6a:8a:b8:
37:c0:5a:b3:6f:a7:05:4c:be:70:dc:9b:7b:0b:1d:fb:16:64:
0b:35:9f:aa:14:94:38:08:4d:d8:89:b6:1c:f9:04:cc:94:81:
d9:bc:02:8e:48:b1:14:48:e1:a7:e9:5a:a2:01:a7:0b:da:25:
04:20:6d:d8:0a:ff:f4:b3:7b:2e:c9:bf:e1:b4:bd:d8:c0:72:
c8:31:0a:5e:2c:9f:e4:98:81:d1:83:2d:7e:ed:47:54:9d:dc:
7b:03:04:01:5f:71:0f:20:2d:65:f8:43:b3:03:72:ff:6b:61:
91:6c:64:38:c6:93:1e:8d:5c:17:a2:da:b6:ab:22:31:e8:7c:
08:cb:66:e8:f2:74:1e:36:a2:e7:bb:04:8a:48:de:49:7a:4f:
82:19:bd:33:5d:5a:16:cc:4f:09:8e:95:55:f7:81:b6:a4:fd:
c6:9a:ae:83:de:f3:db:0d:73:ed:ba:c4:93:6a:4a:f4:b1:a9:
28:65:62:8e:b1:cf:dc:d1:dd:de:62:a4:84:f1:c7:3e:38:fb:
2b:eb:7e:eb:28:78:1d:78:c7:84:46:5f:59:49:1e:46:4b:17:
05:1a:c2:5e:17:aa:da:42:42:85:0f:3c:da:5f:86:40:fd:0a:
2e:7f:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:36 2025 by rpki-client