Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4c16fa-17dc-385c-bb08-f828318586ba.roa
File: 7e4c16fa-17dc-385c-bb08-f828318586ba.roa (raw, json)
Hash identifier: 44LMq3roE+qHns1bdp74Z3jVH0+m+oMbJOhIggR0EfU=
Subject key identifier: D0:29:E0:07:AF:8A:84:96:63:68:26:0B:76:B8:9D:4A:E9:6F:8F:D7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A961DBEA0AEE3BD302A48
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4c16fa-17dc-385c-bb08-f828318586ba.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.171.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:96:1d:be:a0:ae:e3:bd:30:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1825cc0c-36b2-433f-b404-807cd7bc12a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:47:42:53:e4:75:cb:6c:3f:8a:6f:23:78:
11:69:9a:f5:cf:b4:dd:f0:a1:a6:05:d1:f5:e3:d5:
eb:fa:3d:73:2f:3c:a0:cd:3c:47:dd:58:2b:0b:56:
c8:d5:e0:f0:93:03:e1:a1:22:8e:29:a7:71:17:8d:
78:69:07:94:98:0a:9f:02:ab:3b:0a:56:75:16:4c:
7a:82:01:85:e3:6a:81:4f:84:81:04:7c:97:6b:44:
26:86:91:70:da:20:9a:7b:8b:98:03:57:87:6c:f7:
b3:22:2d:8d:ce:fa:4b:01:c3:1a:10:5d:04:6e:eb:
69:77:86:1b:ec:7c:59:45:e8:ff:1d:9d:81:00:28:
01:c8:94:22:3f:0b:12:c2:01:f9:c5:e0:a5:81:5f:
4a:95:e4:29:d2:d9:22:1c:b7:b9:0a:90:fd:f8:3b:
5e:2e:9b:87:d3:f8:9c:b3:26:b1:d6:5c:b6:20:3b:
0d:c5:75:61:6b:e0:30:53:ac:46:b7:9a:99:6e:5f:
c9:71:66:8a:b6:fb:47:36:d2:be:c1:1d:4e:17:47:
47:8f:d5:94:3b:ce:bf:81:fe:f0:b5:50:68:34:c2:
b4:de:1c:f2:fa:af:6a:6d:5c:e0:17:29:bc:c2:f9:
e4:c0:04:59:58:aa:39:6c:ba:8d:d7:e2:7f:6f:ff:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:E0:07:AF:8A:84:96:63:68:26:0B:76:B8:9D:4A:E9:6F:8F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4c16fa-17dc-385c-bb08-f828318586ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.171.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:68:e5:2a:b5:a9:6c:a9:08:5c:56:40:69:e8:fa:dc:39:03:
05:28:3d:f2:70:4d:42:33:e9:ba:82:53:b4:49:2c:b6:e9:1c:
dd:a2:6a:1a:63:82:f9:2b:e3:e4:d1:eb:d1:e1:81:25:08:b2:
db:06:85:41:eb:55:46:82:fc:2c:c5:aa:09:77:c0:91:a5:fb:
e3:49:20:16:96:0b:8d:57:80:e8:da:d9:e5:06:c7:44:d0:67:
9f:7e:fe:3a:b9:9b:59:26:d1:7b:93:05:de:6d:a0:82:68:87:
e7:b2:7d:42:11:6c:f8:1b:d9:2d:0d:d4:fc:ef:02:cb:69:90:
d9:41:27:6b:4f:d5:ec:98:c1:b9:5c:52:1d:77:81:48:56:4f:
ba:47:f9:44:a3:a0:1b:6c:46:9c:c0:6b:07:53:1a:18:99:c5:
a4:f9:2a:fd:71:33:f7:21:2e:a9:7f:87:fc:b3:f0:1e:f1:1c:
38:82:7e:dc:0a:e2:39:e8:81:f9:e0:0a:91:c4:5b:28:68:04:
19:d6:a1:20:a9:79:50:df:99:a7:bc:0e:9b:81:4c:f3:9e:3d:
77:65:fc:51:f3:82:86:4c:35:63:e7:33:60:62:c1:4a:a4:3f:
de:cb:47:8b:18:a5:4d:b1:bf:19:8a:42:4a:b1:e6:ee:ac:d8:
77:85:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:43 2025 by rpki-client