Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a0eede1-e0ae-38cb-a5ac-077a59babe8c.roa
File: 7a0eede1-e0ae-38cb-a5ac-077a59babe8c.roa (raw, json)
Hash identifier: OOEf7EPbWzRCboaBmEB4bEhAggJbzY/WYo4QhgUcpyA=
Subject key identifier: 54:E2:38:E6:8C:DD:5A:ED:3C:05:D7:22:ED:67:02:D1:79:4D:54:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B899B49483F274CDE6C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a0eede1-e0ae-38cb-a5ac-077a59babe8c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 174.171.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:89:9b:49:48:3f:27:4c:de:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3b6380aa-c446-49d0-877b-714a7ded9449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:6a:7c:78:bc:24:bc:9b:55:74:02:72:67:
84:fa:39:2d:1a:0a:bd:b8:2c:0d:d0:b4:ae:d1:01:
50:8e:8b:8a:b0:14:c2:fe:32:ea:61:14:7f:ad:0f:
9f:83:f7:8e:18:87:4c:9f:6e:fe:4b:a2:eb:8c:ab:
50:43:ef:ac:c6:70:77:2a:91:d7:0e:ac:1d:67:34:
2c:25:9d:68:d8:22:d5:db:df:87:c4:e3:1a:02:ed:
b7:a6:a1:9f:dd:3b:f2:7e:34:3d:43:cd:10:df:7c:
75:f8:9b:bf:85:5b:9f:1f:97:26:be:eb:39:43:39:
d3:0b:2e:27:5b:27:74:29:ce:6a:33:3e:8e:63:db:
93:29:bc:85:0f:68:8c:b1:c6:f4:20:ca:c8:75:b9:
89:a1:e5:d2:37:b1:44:ea:63:60:23:68:94:aa:d6:
68:c3:ad:7d:ac:51:82:7a:65:dd:99:6c:6a:51:3c:
95:6b:f6:dc:13:56:6c:01:51:0b:6b:77:75:60:e4:
aa:d6:b7:99:15:23:f7:eb:e2:96:2f:08:5c:e6:ef:
dd:c6:bd:3c:76:2a:ae:26:fe:fc:41:b4:5e:97:50:
39:32:5f:15:b4:75:a9:a7:fc:3a:38:b3:68:8f:46:
3e:f0:74:48:9f:13:b9:ff:0a:81:f8:bc:32:40:fd:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:38:E6:8C:DD:5A:ED:3C:05:D7:22:ED:67:02:D1:79:4D:54:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a0eede1-e0ae-38cb-a5ac-077a59babe8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.171.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:6e:52:52:d7:fd:d0:90:09:0b:40:ec:7b:c7:e4:72:39:91:
83:48:94:79:f9:e3:6d:e3:21:34:46:13:dd:e0:87:23:8d:35:
62:c5:a6:e3:3c:ac:1d:77:b1:40:5d:90:40:49:0e:35:83:1d:
04:65:38:d4:9e:77:ae:9b:0c:7a:b3:02:fb:94:26:83:84:fa:
0a:b2:84:ac:ea:56:eb:0d:59:20:3f:a9:c5:15:40:e8:5e:4f:
95:8d:47:a9:da:57:e7:cc:55:91:54:17:02:8c:d7:1c:ce:95:
e5:c4:ad:4b:4e:b6:3c:d5:6d:37:c8:37:08:9f:a3:1b:3e:43:
7b:91:d5:62:9f:19:19:ff:26:2a:6e:57:eb:c3:af:ef:2b:63:
f4:d0:fd:47:7a:0e:0c:f9:8c:b2:7b:64:2e:c3:2a:75:c6:3d:
83:ae:02:20:05:63:34:2f:ec:fa:b5:4b:21:20:61:a8:d4:8c:
35:27:5a:fc:01:75:c2:95:de:60:30:cd:32:6c:77:d1:05:a7:
01:cb:82:89:10:53:04:16:28:d2:9c:9f:bf:d3:75:55:cb:f6:
16:46:f1:36:49:18:51:8d:d9:fe:6c:1b:84:ea:f0:32:df:54:
8b:63:4e:a7:d1:6d:aa:79:54:a2:b8:26:20:3c:d3:c9:1a:ac:
2d:6d:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:07 2025 by rpki-client