Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d325234-2f42-3406-9e55-5e1cf47b0140.roa
File: 5d325234-2f42-3406-9e55-5e1cf47b0140.roa (raw, json)
Hash identifier: hUHDwXC0fj3p1fLmR0COO2HeSSbz4Q43uQkoHmrFYRM=
Subject key identifier: CC:71:70:45:D8:EA:C8:4B:D7:3D:7A:EF:52:35:96:8C:B0:66:42:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DC10C724579715C518CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d325234-2f42-3406-9e55-5e1cf47b0140.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 66.31.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:c1:0c:72:45:79:71:5c:51:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f708f181-24e8-4ad5-b5c5-e5d20ab421a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fe:f0:0c:12:b3:7c:27:9c:b0:74:8c:2f:4e:
a1:cc:40:6f:7a:ea:6e:af:e1:cf:c1:08:65:36:22:
6d:7c:fd:ad:c6:24:b5:e8:1a:dc:a1:2e:78:4e:88:
4c:63:1f:b4:63:3b:48:f1:88:71:3f:6d:01:31:d4:
1b:2b:a4:11:79:6d:d8:fd:c7:04:b2:b0:05:a4:fa:
67:2b:04:b7:30:1a:3d:c4:4d:a5:f7:01:d6:eb:4b:
16:8e:6f:2d:ee:c8:c4:b2:37:4b:77:e5:55:8a:da:
76:18:f4:fd:c6:64:01:a0:a9:99:3b:20:ac:34:63:
3f:d2:f3:b2:e4:b6:e5:92:bb:d7:26:53:a9:ae:ca:
75:05:ff:eb:07:f5:5a:da:bb:9d:cd:4b:11:0b:83:
21:eb:d9:c1:ee:e7:13:5d:42:b4:f6:18:b9:ee:29:
e0:b1:2c:56:4b:f7:95:33:0d:88:4f:3e:c2:13:97:
06:e0:0f:3b:44:6c:22:68:c3:37:a8:81:aa:0e:df:
aa:d0:c8:71:b6:fa:4b:5b:a6:7d:3d:b9:16:0f:56:
f3:4e:1e:1a:56:1d:dd:6b:72:01:f7:49:bb:6e:66:
58:e7:f4:73:e2:ab:3b:3b:f7:8c:cf:7c:2c:53:10:
25:af:e0:ba:69:24:8d:00:db:16:d3:5f:fa:72:3b:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:70:45:D8:EA:C8:4B:D7:3D:7A:EF:52:35:96:8C:B0:66:42:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d325234-2f42-3406-9e55-5e1cf47b0140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.31.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:fd:e9:8f:18:38:2e:d1:7e:1e:d2:b5:fe:32:be:2f:eb:f3:
d7:27:10:8c:a4:39:7d:85:a3:64:fe:b0:13:69:f1:11:92:67:
e2:87:fd:d2:61:5a:5e:1d:15:39:88:1f:97:44:53:56:ba:aa:
2a:77:4d:ba:84:66:84:1a:2e:b8:e4:d4:f6:9e:81:e9:eb:c5:
4a:d6:60:94:6e:a1:99:01:b9:9d:f7:27:be:d3:1e:e5:2b:7d:
ee:20:50:e6:88:c6:d0:02:57:e2:88:39:f1:e1:a8:72:97:99:
5a:14:f4:a4:c7:92:4b:d3:3f:ff:8b:91:10:98:f8:4e:28:aa:
6a:2e:c3:fa:e6:26:38:30:bb:4d:a0:64:0e:a9:1a:9b:85:30:
ed:d4:22:2a:e4:ac:a7:39:4e:94:76:cf:ad:22:05:1d:ee:80:
00:fe:eb:89:43:1e:94:23:4a:53:ba:f9:2b:ba:6f:21:7b:99:
6a:25:f2:8e:36:49:45:dd:4c:77:73:28:75:0e:fb:49:6c:e6:
c0:20:bd:e0:e4:05:8d:30:40:bf:c4:de:62:31:2c:22:7f:87:
93:7e:a5:69:54:86:35:5d:62:b9:6d:e6:27:fc:38:cc:1d:e5:
8f:54:6c:ac:1d:6e:f7:77:c9:8e:8c:ee:bd:58:96:d4:c6:f1:
5f:08:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:14 2025 by rpki-client