Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6adf67ec-e59a-3510-932b-bbe92f0c1983.roa
File: 6adf67ec-e59a-3510-932b-bbe92f0c1983.roa (raw, json)
Hash identifier: QI+hETt+aNH7f5rQVc5z99q6qisilC5JEs/yvgxVV74=
Subject key identifier: 60:15:EA:01:B9:D7:B6:ED:6A:14:2F:04:79:BA:DA:26:4A:C4:68:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9A7C1DBE6B63770A8580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6adf67ec-e59a-3510-932b-bbe92f0c1983.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.236.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9a:7c:1d:be:6b:63:77:0a:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=404fd9c1-6d7f-47cb-99c4-680e78dfc56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:34:cc:f7:a6:31:df:4a:44:19:15:92:7b:5f:
d6:54:b3:50:03:f0:3d:f2:3b:08:88:e2:58:bb:61:
57:56:bb:c0:bc:04:c0:1a:a3:a4:8f:9b:73:68:7e:
c1:a9:59:c0:48:87:4d:d0:a7:53:0d:28:ab:f0:47:
b2:cd:1b:36:01:bf:9d:23:7b:32:90:8d:0a:12:2b:
07:bf:bc:bc:9b:4c:67:83:fd:c8:49:29:9c:af:46:
a9:48:c6:d7:a8:31:79:ef:29:7c:4a:be:3d:38:57:
81:f3:f0:03:7e:a7:51:43:37:7e:f9:76:e8:20:2e:
cf:55:1b:7d:82:ba:28:56:c0:3c:9f:91:03:03:b9:
a1:38:bd:96:35:d9:2a:fd:01:8a:d5:25:09:79:5a:
64:fd:cf:9b:e9:79:ba:e7:ed:33:77:90:d5:57:53:
ec:46:c4:ab:91:92:99:88:dc:01:98:4f:bc:75:54:
e5:b9:c5:87:0c:99:32:79:ee:d6:0c:d2:ec:12:d9:
9a:87:11:45:6a:7b:43:5a:b9:8b:02:7f:46:68:a1:
47:0b:05:c7:38:e1:6a:d5:68:3f:29:14:05:56:c0:
df:d6:2e:d8:ae:6a:80:eb:4f:d6:f0:a2:88:e9:82:
82:ec:12:03:cd:49:15:dc:88:1e:4e:5c:c2:27:7a:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:EA:01:B9:D7:B6:ED:6A:14:2F:04:79:BA:DA:26:4A:C4:68:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6adf67ec-e59a-3510-932b-bbe92f0c1983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.236.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:d3:20:04:00:6a:f7:6b:35:5e:b9:52:b7:78:ab:47:58:4f:
1c:5e:fb:f4:b9:fc:0b:af:d8:92:d5:d3:2e:71:10:6e:77:fc:
50:49:f5:ab:22:32:a0:a3:63:8e:47:8c:4b:1a:d2:ad:f5:ae:
04:38:a0:d9:ec:e8:05:f1:da:d0:1f:ee:36:97:7a:3e:f4:54:
09:20:84:00:39:34:7b:38:7b:14:54:0d:17:2c:09:91:00:7d:
be:74:9a:ee:e1:d3:61:8b:8c:9c:a0:b2:d2:b9:33:a0:fb:ec:
72:36:50:a2:33:2b:ea:c0:2f:0e:a2:3f:a8:93:bf:e6:54:47:
f2:37:20:a1:45:3c:7c:c0:df:9e:a0:c8:92:9a:3a:ac:8e:b3:
24:72:26:b8:16:71:18:7d:e4:ac:a9:1b:05:95:6a:c1:b4:8f:
65:e1:2a:7b:91:70:e0:60:1a:9a:76:ed:31:76:02:87:e5:3a:
f3:c8:60:85:34:19:c0:9e:c4:80:97:99:57:0f:52:0e:6f:3b:
9c:50:9b:a6:0f:95:42:c7:37:02:de:cd:d7:b7:36:74:f7:bd:
21:10:46:c4:67:3e:b9:4d:ac:54:58:ca:06:70:4f:8e:ec:73:
08:43:78:b2:58:1a:01:eb:ba:94:32:2b:83:86:7d:11:ae:3c:
ca:96:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:19 2025 by rpki-client