Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61a95a32-f29d-37d0-b72f-7f93f54b2e72.roa
File: 61a95a32-f29d-37d0-b72f-7f93f54b2e72.roa (raw, json)
Hash identifier: CblvZnLVz0xboVBlgd0TB2VzzM1T5bSc/RTRIVVwrpQ=
Subject key identifier: 88:B6:C6:FC:85:40:58:AF:C6:48:42:BA:D1:4C:6C:B1:F6:35:8F:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13A0F8660AC7E713D6DB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61a95a32-f29d-37d0-b72f-7f93f54b2e72.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 71.202.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:a0:f8:66:0a:c7:e7:13:d6:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f4f65a0f-3e6e-4d15-a3e3-c853b226fc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:41:2a:09:36:7f:32:f3:5d:a1:6b:a4:ac:
18:52:9e:b7:6a:8a:26:af:b8:36:3c:27:ee:ad:23:
b5:76:b3:e4:f3:d3:b5:24:31:a4:ef:e7:ca:0f:05:
e4:43:77:8b:a1:26:a0:45:bf:3b:e1:10:be:28:db:
c4:61:24:e8:85:6e:ce:63:36:3d:37:c7:eb:b2:9f:
4e:d4:91:66:c7:85:6e:bd:73:3e:c3:60:2b:94:89:
73:dc:21:53:55:91:63:b3:c6:3f:e7:e5:51:51:0d:
ab:cb:56:99:d5:8a:2c:40:1d:0b:7d:fa:cb:5d:da:
47:dd:31:17:e2:55:3b:75:b5:a4:74:68:35:ec:ae:
1e:77:22:da:0a:06:69:3c:ae:4b:6d:e0:f9:38:d0:
80:55:a9:26:fe:37:51:da:88:c1:71:bc:65:f7:21:
1f:95:35:3f:54:9d:8b:ac:5d:da:63:57:73:58:81:
96:74:97:5f:2d:d6:f4:47:c1:10:0b:da:92:10:b8:
92:d8:fd:c0:86:55:fe:46:03:92:e4:e2:b3:90:ee:
ba:35:c2:35:9e:1c:d2:02:74:0e:26:e0:e5:9e:08:
ee:b6:15:a2:a3:54:26:ca:75:3b:97:ab:cc:25:38:
69:6f:21:40:30:80:4b:08:fd:01:8e:ac:3a:98:06:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:C6:FC:85:40:58:AF:C6:48:42:BA:D1:4C:6C:B1:F6:35:8F:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61a95a32-f29d-37d0-b72f-7f93f54b2e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.202.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:d0:da:73:e3:d4:10:87:65:b6:b3:a4:47:f3:11:d7:f4:8b:
cf:09:d3:2c:95:98:33:11:0b:17:d6:1f:12:25:35:48:03:95:
16:b2:1c:cd:6a:44:56:91:17:32:e8:3e:18:95:ea:e2:c3:6f:
5e:6d:1b:4a:2b:22:76:27:12:e8:54:d3:58:95:e5:67:75:f9:
0f:8b:00:9b:24:ed:ce:9c:f9:b9:be:53:30:91:0b:35:58:5f:
9d:90:ed:8a:05:3b:67:7f:68:05:9a:39:d8:54:dc:c6:13:4e:
d0:8a:b5:23:6d:bc:1a:bb:38:04:5e:12:ef:8b:2b:08:f4:8c:
c3:00:87:5d:04:da:c5:7d:bf:8c:22:70:0b:d3:75:19:9e:fa:
50:e5:17:cf:9d:39:5b:bc:8e:45:fd:c4:02:73:d4:ba:49:7d:
43:3b:39:25:c5:0b:39:10:54:59:e1:60:aa:19:e9:b8:74:9f:
1a:aa:32:dd:4e:22:f9:6b:9d:90:71:06:09:33:a7:3f:84:a0:
9a:16:60:dc:fe:e7:01:ae:50:9f:21:6b:e5:2d:1e:0c:39:f5:
f7:85:ea:99:be:f6:07:90:06:a2:ce:ca:28:26:3b:5c:b7:90:
66:04:1b:03:16:2b:a1:d4:09:9f:bd:a8:20:92:73:32:ce:24:
4a:54:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:17 2025 by rpki-client