Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b95520e-10e7-3a1b-8e3c-340d632e140b.roa
File: 7b95520e-10e7-3a1b-8e3c-340d632e140b.roa (raw, json)
Hash identifier: f/CkSOCbcUdi7/9BLEHB0flpbyOjP31FVj+RfC/VUFg=
Subject key identifier: 46:54:49:2A:08:4D:E2:C7:2C:74:6D:AD:3C:C9:37:DE:B0:17:1F:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13296DBB5078C7FC3BFA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b95520e-10e7-3a1b-8e3c-340d632e140b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 174.160.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:29:6d:bb:50:78:c7:fc:3b:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=43ecbc22-6737-4580-acaf-26a9bc6e0d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:8a:89:27:2f:4a:39:1d:5d:c8:c3:de:03:
8f:8d:58:0a:f1:15:85:d2:9a:b1:68:52:8d:20:13:
6a:22:fb:f0:22:36:08:1b:90:21:28:a0:90:38:0d:
9e:07:66:33:30:23:e2:7a:f4:de:49:e6:38:70:08:
05:a4:5d:f6:83:27:ab:e9:80:1f:d0:d7:3c:2b:87:
89:50:5d:23:2b:c1:dc:9c:72:d8:c6:9e:b7:52:1e:
70:00:dc:ce:17:ea:4b:37:3b:c2:00:61:77:74:ec:
ca:67:1f:52:ea:f3:b0:49:6c:9d:ed:21:f3:6e:62:
6b:85:bb:fb:09:cb:d5:23:7e:26:61:5c:e0:67:d4:
54:bd:a8:96:86:08:15:b2:c8:0d:89:06:6e:d3:14:
57:9d:ea:51:fb:e7:9d:3d:f5:d8:b8:d6:6b:1a:9b:
d0:5b:03:fa:43:ec:f4:f0:4b:86:5b:32:d3:81:d6:
a1:a0:a9:fe:04:51:6a:87:90:62:b5:0a:3b:ef:88:
63:05:52:b5:64:b4:00:a3:4d:3b:fe:e6:4f:de:a3:
a1:32:19:0d:6c:93:86:3f:36:8d:e1:34:9b:b2:84:
fb:00:61:64:35:9d:59:ca:43:73:09:9a:32:9a:20:
da:02:9b:01:d7:68:b1:ec:11:cb:d4:23:78:21:69:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:49:2A:08:4D:E2:C7:2C:74:6D:AD:3C:C9:37:DE:B0:17:1F:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b95520e-10e7-3a1b-8e3c-340d632e140b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.160.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:34:c7:cc:7b:8e:90:af:16:26:63:15:61:a5:70:9c:cc:31:
cc:1b:6a:9b:71:fc:d3:1f:82:a0:7a:85:51:08:50:81:f7:04:
8b:42:44:16:a6:74:6d:50:b6:69:b4:cb:16:49:2d:17:b4:5b:
fa:06:7e:52:8d:11:ff:65:79:a1:da:69:c1:b3:62:20:e9:7e:
af:08:8e:cc:3d:04:d0:3f:e8:f3:f8:28:8b:6b:81:0d:4b:a3:
18:11:80:cb:21:4d:34:61:9b:4f:13:d1:23:c3:95:71:15:3b:
d9:22:0e:9a:66:13:fb:4e:6a:df:5f:3c:92:c0:35:67:b1:53:
a2:80:cb:34:f9:df:d7:4e:d7:ec:84:d7:f3:d5:b2:a2:13:00:
93:84:b8:bf:50:4f:73:66:de:b4:f4:50:d3:95:cc:72:11:de:
2c:d3:f6:0d:b8:4e:8c:06:d2:47:1b:bc:b8:c7:4c:c3:6a:f6:
bc:46:b3:ec:84:43:80:ec:84:ad:7c:97:00:ad:cc:e6:ff:e0:
65:56:42:96:2c:b2:89:2b:6a:e4:0e:91:22:86:b4:e9:8e:e1:
f2:68:2a:2b:13:58:7b:f0:8d:f9:ef:96:ad:73:ac:8e:39:54:
0d:15:ab:2b:9e:22:6e:3e:4e:90:e6:82:6c:87:86:e9:09:2b:
06:41:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:39 2025 by rpki-client