Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61488ab8-f080-3121-8fea-77bbd05e060f.roa
File: 61488ab8-f080-3121-8fea-77bbd05e060f.roa (raw, json)
Hash identifier: ZGNOwzGeEjPPj5nzHglNAJBFUQgICVuV2ZaYOPrU6xk=
Subject key identifier: CF:33:0D:F8:11:ED:D7:94:20:76:58:EA:3E:9C:B8:CE:46:2C:10:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B49122E14F52ABE7BDC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61488ab8-f080-3121-8fea-77bbd05e060f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 67.167.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:49:12:2e:14:f5:2a:be:7b:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ce8ed8c3-4653-4a63-b64a-89f965c0f26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:59:ca:76:32:4e:ff:66:ed:21:34:66:63:
9d:16:9e:20:59:de:4d:46:8c:72:78:57:5e:b7:03:
53:9c:a7:2a:00:14:92:a1:27:74:73:03:96:ed:c5:
10:9d:2d:69:89:6e:da:d5:41:e3:95:58:4a:c9:b3:
b0:09:bf:28:08:58:5a:98:4a:98:ac:d8:0e:9a:81:
86:72:91:85:51:06:d1:7d:a3:ed:4c:6a:73:da:8a:
19:cb:da:24:f0:c9:dc:aa:bc:c8:1f:41:5c:99:61:
0b:a9:e2:da:45:e0:03:4e:eb:32:57:de:71:68:b5:
db:f6:a0:69:b7:67:0b:50:d8:16:8e:1a:9a:31:b2:
5b:e2:1f:ee:90:93:26:b3:83:3b:34:89:f3:40:9c:
11:8a:bc:74:1d:05:88:19:ef:57:8f:b9:fe:52:59:
ce:d4:b7:79:db:1f:40:9b:e2:c6:ed:0d:ce:d7:c0:
28:c7:46:ae:0e:41:2a:cb:d2:50:51:fb:56:cd:68:
6a:71:63:f9:7e:8b:b0:43:49:06:13:2d:50:1d:f6:
75:e0:8d:99:c9:e5:4f:b0:cf:1e:50:23:d6:7b:1d:
10:4a:77:17:1d:1b:04:80:0b:7b:cc:71:ca:a9:8f:
79:91:5d:00:ce:64:e9:b4:04:e1:80:f4:30:e5:a1:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:0D:F8:11:ED:D7:94:20:76:58:EA:3E:9C:B8:CE:46:2C:10:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61488ab8-f080-3121-8fea-77bbd05e060f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.167.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f3:a5:dc:41:c8:89:5d:0b:4b:27:9c:9f:d3:0c:db:52:fd:
ae:65:84:df:af:6c:f4:fc:b1:92:96:a9:0e:74:5e:98:1f:c5:
f1:92:cf:ba:83:f6:33:b4:77:17:f1:2f:e7:08:8c:7a:a4:79:
5d:22:82:c5:78:ee:94:2d:78:ac:36:93:dc:b6:97:be:2b:e9:
b5:c3:28:ac:45:3b:be:9d:c1:a9:6c:72:7b:b9:b6:30:94:ec:
0c:63:2b:37:48:08:d8:70:90:77:17:7b:10:6a:95:b5:92:b7:
da:ea:d0:4a:37:98:03:8c:42:39:09:51:94:14:1f:9c:b7:2c:
da:5b:23:c2:78:96:34:5b:e6:7f:19:64:0c:46:45:83:04:15:
41:7d:f2:af:b6:a3:60:5e:98:6f:99:e7:d6:53:a1:64:fd:c6:
93:16:0c:31:1b:3d:31:29:e5:4a:09:dd:7b:29:89:d3:34:f8:
77:21:c9:0c:02:cb:3e:5f:f0:4f:f0:a9:51:e9:b2:54:7b:7d:
57:58:d4:e5:b4:ff:69:74:0d:51:e4:72:cf:46:49:13:0b:00:
0a:cd:33:7c:c2:c3:05:65:eb:04:94:8e:59:65:82:98:2e:7e:
84:9a:7f:64:a5:e9:0f:d9:32:9f:d2:ae:86:f1:f2:8c:c6:29:
98:82:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:07 2025 by rpki-client