Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa
File: 7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa (raw, json)
Hash identifier: i1cvkyWpnJxpz+Cayogas1nZbbUbse59YcUK4fHc4GU=
Subject key identifier: 9C:7D:54:BC:90:C1:7A:68:79:FB:D5:2D:82:AA:2B:D9:B2:F0:27:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DD8EDBFF2BFD368AE2580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.234.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:d8:ed:bf:f2:bf:d3:68:ae:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7d95c442-bc6e-4c29-ae0d-5142af919dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:86:9a:52:73:1d:77:95:08:08:c6:34:1f:
33:15:e0:58:04:73:e7:6a:7a:b7:46:6a:cb:d4:c5:
c7:d2:c9:a2:8c:ac:89:f2:a1:27:7e:b0:85:12:ea:
d1:d2:d0:fd:de:8f:d7:c2:34:82:f5:ff:51:a5:83:
28:f0:6d:7f:58:4a:30:c4:a0:96:81:9b:2f:ba:63:
32:7d:2a:eb:89:d2:85:e9:f0:cf:59:60:3a:92:0f:
22:d0:64:0a:41:87:5b:9f:f6:97:cf:49:63:fb:1d:
6f:8f:de:da:0b:8d:f9:c7:d3:1f:10:9c:e9:9e:3d:
74:cb:24:68:7e:d4:52:f4:31:84:8f:5b:31:35:28:
07:06:51:a8:59:ea:a5:28:fe:83:1d:33:82:e7:3e:
d3:d1:85:2b:e1:cb:ca:6c:96:c8:b3:76:6d:46:7f:
e2:3e:a6:1d:28:c6:25:af:16:83:3f:7f:96:fe:ce:
af:f5:98:9d:b6:31:7f:ad:1d:3b:ba:2f:e0:4e:80:
c2:94:69:74:60:84:a9:30:71:55:ac:ea:9c:b1:23:
58:28:35:d0:7f:f2:66:75:23:52:5e:16:66:db:85:
b1:43:50:68:a0:93:ec:66:bf:b2:04:90:88:b6:ae:
90:c6:5f:bf:23:d3:6e:86:aa:c8:ab:a2:c8:37:45:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7D:54:BC:90:C1:7A:68:79:FB:D5:2D:82:AA:2B:D9:B2:F0:27:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7194a8f5-d7c6-3283-ba62-9abe38ca5cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.234.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:27:2b:f6:23:25:49:98:97:9b:73:93:25:a7:9e:b1:e0:4b:
76:55:78:da:64:fb:0c:37:47:3b:7d:ca:6e:c7:c7:27:4e:2d:
4a:1d:1b:1a:d3:a7:d3:8c:2b:70:a5:05:25:bb:ff:59:b3:0d:
f0:46:14:35:38:1f:0e:8a:1d:10:82:c1:57:6c:52:4c:93:ac:
98:95:30:6d:ac:a2:da:20:b1:e1:8d:f1:34:d5:7d:8e:ce:9e:
bf:f0:fc:be:b7:cf:43:61:bb:7a:18:48:4b:c2:5a:e6:db:8b:
75:04:87:52:b5:bf:fc:07:6f:06:71:89:63:ab:e0:de:4b:a9:
76:9a:00:aa:66:7e:35:ec:5a:a7:0b:62:84:70:7b:2d:38:3f:
57:63:99:31:24:1f:58:eb:ff:98:66:27:ce:75:cd:15:08:a2:
a0:e0:e8:cd:fb:ac:cc:b5:84:c3:ed:74:51:47:46:70:41:c4:
66:0c:b8:21:25:b7:e9:7e:be:80:45:46:87:8c:ac:dd:1d:e7:
88:31:f0:72:1b:99:88:4f:58:de:63:36:b0:bd:98:01:e2:38:
9b:72:c3:d4:f5:60:5a:51:e2:85:18:85:0a:7b:43:53:79:ab:
47:9c:08:02:8a:54:47:b9:1f:e0:ef:51:dd:fa:81:2c:39:54:
0f:76:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:06 2025 by rpki-client