Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b0802ad-e728-3a27-8a2e-85b49d8ea827.roa
File: 7b0802ad-e728-3a27-8a2e-85b49d8ea827.roa (raw, json)
Hash identifier: 9g3It+Dwk1FDz3fjS+HH3SUxxj5Q7pFkMT8ctNEKY+Y=
Subject key identifier: 1D:C3:6E:AE:50:29:E4:E1:70:E3:3A:0E:38:54:1C:5E:1A:CA:98:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1276C7ECBE125E1BD2F280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b0802ad-e728-3a27-8a2e-85b49d8ea827.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.173.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:76:c7:ec:be:12:5e:1b:d2:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6823426e-fb79-4fdf-8423-cff55f51c364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:91:cd:fa:d5:37:0d:20:62:30:77:30:7d:
bf:63:65:95:0d:a7:94:dc:48:f7:8a:e8:fe:a5:b0:
14:99:8d:c1:63:a6:28:ba:53:bd:0e:bb:6e:ac:45:
ce:ee:f8:d1:68:02:dc:32:bf:5a:00:eb:d4:bf:7f:
97:15:8c:35:68:20:72:49:7c:82:d1:b0:01:3a:65:
96:79:88:1a:4a:e8:92:54:11:d0:01:92:fe:79:82:
5c:ad:14:2f:a1:17:0b:2a:ad:eb:aa:50:c6:17:35:
3d:c2:fe:d5:ac:3c:bd:7d:d2:fc:9a:f6:7a:2f:ec:
d1:78:6b:03:c1:15:db:ec:d2:63:a8:ff:87:dd:3d:
f6:99:db:cd:b4:b5:d9:3d:04:99:a5:9e:65:b1:bf:
4e:3e:0f:dc:40:78:d0:eb:e9:40:86:a1:b1:34:75:
b9:32:ae:38:76:2b:15:0a:a1:2f:5d:b2:14:3c:5f:
bd:d0:41:6c:d2:41:65:bb:a2:80:53:89:92:d0:cf:
b1:58:f7:29:7c:ac:a8:9a:81:52:37:01:13:d4:81:
23:4c:86:90:7a:90:c8:84:a1:a2:60:07:7c:f8:d9:
02:e8:62:f3:7d:96:27:14:c0:af:88:1b:a2:ee:57:
d6:40:9a:eb:0e:50:22:b3:35:c3:8b:8b:3c:2e:34:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:6E:AE:50:29:E4:E1:70:E3:3A:0E:38:54:1C:5E:1A:CA:98:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b0802ad-e728-3a27-8a2e-85b49d8ea827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:c5:85:7d:be:99:f4:7a:cd:ad:92:b5:14:0b:0e:88:c6:1b:
a0:9e:64:5f:da:b1:70:94:4f:1f:9f:8b:59:8e:96:31:8d:02:
3a:51:d5:3f:93:82:0d:d2:e0:30:76:f1:7d:1e:81:4f:a8:a6:
48:2f:b6:1b:de:15:64:b0:6f:82:44:ba:7b:8e:c7:28:c0:c4:
92:f5:65:30:71:8d:7a:07:5a:00:1d:da:47:ad:b9:80:48:5f:
b7:1f:74:a1:66:fb:42:b5:ef:4b:0c:29:01:c1:d4:10:bc:36:
26:c5:f8:6b:5e:22:57:0b:36:80:3d:a8:50:79:9a:03:db:84:
0c:2e:a6:e7:d9:07:f5:7a:f0:b9:06:42:4f:26:70:d2:bf:26:
70:61:7a:30:8e:a6:7f:16:74:5f:a3:9a:05:5a:42:77:f2:18:
55:0d:be:bf:3c:7b:14:f8:2f:a8:5c:d8:09:d1:87:59:b9:34:
63:0f:35:08:52:16:85:92:cf:f0:25:3f:da:bd:21:74:ee:6d:
8f:f2:ce:35:2a:77:6c:ed:e7:bb:6e:87:e9:d1:1b:e3:27:5b:
1d:6d:46:bf:cf:cb:a6:8e:fe:13:ee:82:fd:6c:2d:81:70:5c:
b1:4c:46:4e:5f:f0:16:91:b0:10:7b:ff:b6:02:00:84:3a:bb:
b8:89:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:10:29 2025 by rpki-client