Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8201f1e8-8965-3224-a256-b4abdfbe9f10.roa
File: 8201f1e8-8965-3224-a256-b4abdfbe9f10.roa (raw, json)
Hash identifier: yUD0EKmklx0+F1iPX7Sus6NKUeywnY7eSBtfMf4DfVk=
Subject key identifier: 92:7F:89:46:AF:C1:5C:7F:4C:9F:8A:D8:2F:D3:56:38:F2:2B:34:98
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D6A945A7A64DFF0B5E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8201f1e8-8965-3224-a256-b4abdfbe9f10.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.176.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d6:a9:45:a7:a6:4d:ff:0b:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=85bf4b48-b632-44e5-8e22-1ca576ed4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:1c:7e:82:4f:82:9a:ad:aa:e1:be:6f:75:
37:a6:c7:0c:e5:c2:09:b1:d2:0c:6b:73:d5:0d:55:
6f:93:49:b8:21:1b:68:4a:68:ab:06:1a:b9:2a:1c:
ae:a8:42:e6:22:34:90:63:05:c3:bd:ee:01:46:fa:
2e:d0:67:35:6d:a7:ab:5d:23:67:68:ae:e2:ca:ac:
49:94:47:75:03:11:ab:99:56:73:9d:46:89:ae:f3:
e0:11:71:80:60:1d:0c:45:75:78:7d:af:e9:39:97:
0d:06:12:21:a7:85:4f:38:82:51:90:93:e5:85:94:
c7:61:be:27:24:49:c7:9b:6b:3a:c1:12:1c:cd:f6:
dd:4b:61:89:3d:53:e6:4d:31:ac:12:23:f9:fb:6e:
06:1a:b4:29:a3:81:52:cb:95:5d:8a:bb:55:ba:01:
75:1d:87:42:c7:51:80:29:e3:c1:06:57:86:f3:be:
49:8e:f5:84:4d:c6:ed:59:94:0d:ce:0f:34:65:4f:
f9:a6:2d:87:05:4d:8f:c6:4d:02:eb:86:63:54:ba:
e8:62:64:ce:34:ac:4d:89:92:ae:5f:22:20:91:cd:
76:48:10:73:6e:da:47:3c:a9:b9:6b:e3:d0:05:00:
b5:f6:14:7a:25:57:69:50:4e:17:6a:0a:8b:1e:53:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:89:46:AF:C1:5C:7F:4C:9F:8A:D8:2F:D3:56:38:F2:2B:34:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8201f1e8-8965-3224-a256-b4abdfbe9f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.176.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6a:f6:ce:54:ce:1f:36:0a:77:e6:c1:ed:fd:a0:1b:23:e5:
08:7c:b1:99:25:60:4f:83:c8:3f:14:2a:60:71:93:d1:8d:b3:
02:98:f5:97:88:5b:19:41:a1:e6:8f:e8:b9:24:6a:2d:81:42:
be:a2:76:eb:7e:85:24:16:d6:53:a2:7e:c6:83:74:52:24:de:
7d:19:d4:e5:f6:ea:1c:9c:fd:23:b3:7d:88:8b:7a:b9:a6:87:
df:98:c4:f5:a7:4a:e4:dc:13:22:47:84:24:6f:74:68:9a:45:
03:f6:25:50:dd:a3:d0:80:da:ae:9c:ad:75:90:92:34:78:12:
55:05:4b:ab:69:f6:58:2b:b1:62:46:58:d1:ee:bc:89:91:7d:
fa:7f:cd:f8:f5:1c:b8:bb:f4:93:61:47:e7:89:c1:c6:9d:f6:
4e:87:4b:f2:e6:37:aa:25:ec:fa:3d:9b:de:d9:08:23:ac:f9:
68:4f:ea:f0:2e:0c:2a:22:6d:dd:58:19:d2:b0:b3:b0:58:f2:
51:20:f8:b5:3b:e9:13:79:e8:37:5e:5e:9c:6f:ce:d7:10:b2:
3d:36:fb:f3:c8:cf:5f:b9:67:c4:23:12:50:f8:65:d5:dd:46:
c0:eb:d8:46:a5:42:39:a8:f1:53:98:4e:a1:27:29:a1:49:14:
c5:f1:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:46 2025 by rpki-client