Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e7d6465-ceaf-3b87-a90d-28d0072222d9.roa
File: 6e7d6465-ceaf-3b87-a90d-28d0072222d9.roa (raw, json)
Hash identifier: Bxip2hERYN/2fheEkVGAIfQB44c3MXxsCbdxil4kTyk=
Subject key identifier: E3:27:10:53:2E:A7:1C:B8:FD:F2:92:47:F5:E4:49:6B:8F:E4:F3:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ABE710180C6E8C5263800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e7d6465-ceaf-3b87-a90d-28d0072222d9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 174.168.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:be:71:01:80:c6:e8:c5:26:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f91bb20a-5a66-4746-a0ab-1d32d0f1b2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:ff:1d:eb:85:55:6f:4e:de:41:7d:0b:34:
a5:31:30:0e:b0:86:6a:10:c4:99:39:19:ea:c1:d6:
c5:72:3d:f7:bd:b7:3a:c8:01:59:80:c9:63:d9:f4:
c7:71:4a:61:9f:c4:85:34:95:97:57:72:7d:f2:eb:
4c:00:2b:5e:74:a1:d6:56:b0:01:33:52:1b:d1:39:
21:28:ac:4f:a7:b5:d6:86:5b:5f:be:9d:a2:b0:79:
e6:e3:0e:83:99:1b:10:5c:9d:85:98:13:cd:68:1c:
0b:ae:71:e2:c7:92:bd:d1:75:51:c4:75:5a:00:81:
6b:cd:77:0e:4f:1b:95:29:09:64:bc:67:28:f9:2d:
6e:bd:f3:58:97:33:24:3a:77:08:73:da:f2:fe:ea:
5b:55:c4:45:00:66:2e:4d:5b:36:62:f8:56:63:c0:
36:ac:8f:d7:0f:91:6e:2d:39:8a:08:74:00:a9:8c:
a3:bd:19:2c:e0:7f:2a:ea:c1:33:9b:87:0a:ea:77:
11:74:59:72:3d:9f:ab:4f:a7:6c:a2:d7:0b:ea:18:
bf:eb:48:e6:09:15:12:00:74:36:70:2f:9c:77:17:
62:88:bd:b5:81:61:09:66:ad:a4:ca:f9:cb:41:c7:
c7:88:0a:96:73:0c:de:2b:94:61:f8:91:78:32:ff:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:10:53:2E:A7:1C:B8:FD:F2:92:47:F5:E4:49:6B:8F:E4:F3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e7d6465-ceaf-3b87-a90d-28d0072222d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.168.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:04:18:ec:5a:c8:3e:80:51:57:e0:85:47:96:54:8a:1b:58:
23:94:23:c0:93:e4:7a:f9:1b:7f:2a:c7:17:61:d3:16:0a:2d:
80:88:e3:d9:d7:1e:a1:bd:d5:2f:c0:ac:b0:5a:9d:2a:9a:54:
43:d0:ae:3d:2c:e0:79:66:1d:df:05:af:13:cc:cd:99:28:22:
61:9e:a5:b4:c9:43:f8:20:94:d9:8a:e0:a1:0e:e4:88:29:1a:
9f:d5:3e:c6:fc:d5:d6:18:de:6f:a1:18:54:ca:c2:35:b0:a8:
b2:1b:56:e7:5c:4c:5d:18:11:f1:5a:b5:07:66:f5:0f:60:58:
9b:b4:24:20:e1:00:79:51:2c:8f:b3:22:bd:d5:1c:c1:3c:f3:
47:5f:e8:d1:c1:23:8c:a8:b1:e3:1c:a1:9d:31:48:2b:c6:0e:
93:a8:0e:f3:19:2c:d2:9c:e7:e8:dc:8c:40:b9:d7:45:ed:0c:
4a:67:d2:71:73:c4:7c:b9:df:fd:a9:87:c2:a5:a1:78:29:74:
bb:c0:da:c0:07:ef:58:34:cf:16:37:49:0c:60:73:d9:5c:00:
04:e1:13:5a:66:02:a3:0f:8d:c5:c9:54:0a:bb:66:3c:5b:ea:
83:18:f9:ed:d6:af:02:9b:41:1c:71:9b:b3:55:42:ea:ca:18:
4d:6d:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:37 2025 by rpki-client