Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85312f6b-bb27-30e6-915c-f8f0638fb800.roa
File: 85312f6b-bb27-30e6-915c-f8f0638fb800.roa (raw, json)
Hash identifier: uMGe4rSy+jCX2CJK2GSR1VolSerB1XgwCrgeYDDpg9Y=
Subject key identifier: 9F:27:99:FF:BB:38:73:67:BB:EA:AB:D0:74:3F:97:F3:07:D8:3B:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A95F9FB8940601BFBD6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85312f6b-bb27-30e6-915c-f8f0638fb800.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.171.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:95:f9:fb:89:40:60:1b:fb:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=53a8388b-994d-455e-9b39-31981388eb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:8d:4c:a0:7d:cd:f6:b7:4b:26:89:4b:ca:
80:29:1b:99:38:aa:cd:c1:da:3f:4b:11:2b:b0:37:
74:82:4b:dd:0b:41:04:a3:f2:dc:43:e1:0a:5f:38:
9b:29:5c:88:ec:15:52:7e:14:e6:6f:c9:f5:39:83:
ff:bb:1d:76:f3:3d:0d:1f:e1:ed:eb:3f:d1:aa:61:
67:e9:4f:fd:1e:45:35:95:3b:28:4d:d2:b0:33:4c:
5c:bb:f0:38:df:74:f4:d0:6c:4e:7d:9e:b1:0a:1a:
a5:2f:4e:21:01:bb:94:b1:be:17:6f:ff:06:c8:d7:
ec:5c:f6:7a:e9:ad:d0:c1:3f:04:12:db:58:81:b0:
9b:46:17:64:f7:4d:16:b0:30:df:c2:af:5f:61:73:
65:a9:bf:93:7f:62:64:d8:29:ba:a4:b4:34:35:d2:
26:36:27:ee:57:25:84:71:fc:9a:a4:1d:21:a4:ff:
ac:ef:77:40:79:e6:a1:3d:b0:7c:3d:37:01:87:c2:
b3:0f:b0:f3:b9:74:1b:64:1f:5e:61:e1:20:e6:3e:
1f:f3:32:bf:ff:62:b8:eb:93:25:f2:a7:d0:c8:b1:
2b:34:9c:c5:9e:71:16:52:70:68:5a:fd:3f:e2:05:
10:f9:81:67:d5:cf:77:3f:34:fa:5c:34:22:66:3e:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:27:99:FF:BB:38:73:67:BB:EA:AB:D0:74:3F:97:F3:07:D8:3B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85312f6b-bb27-30e6-915c-f8f0638fb800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.171.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:6b:3f:4a:1f:99:67:79:6c:8a:bc:fd:43:14:c9:7d:76:79:
17:68:7b:70:0f:d8:79:6b:a2:77:75:87:f0:d0:3d:4a:96:7b:
a7:c0:5e:b5:e3:1a:03:3f:4c:05:81:8d:a0:f1:0c:27:21:19:
cc:73:7a:d1:bb:15:4b:15:6c:3d:b5:c7:fb:92:02:55:4b:b7:
35:32:06:48:5d:13:9d:8e:d9:b1:c7:ab:79:5b:9c:23:a8:96:
64:fe:47:5b:eb:84:b6:d1:49:77:bd:1f:6a:f6:1e:c9:ad:c0:
78:da:fd:8e:bd:6a:3e:a5:78:bc:82:74:b4:f7:8f:ed:6d:4d:
89:3b:2e:31:58:ef:ec:e0:fe:0f:a4:7b:72:92:80:c4:cf:a7:
9c:a6:e1:44:a4:a9:d2:e0:b6:f3:6a:95:b6:69:7e:65:42:95:
2c:36:1a:52:1d:96:7d:ea:95:49:4c:89:76:4a:ff:31:5f:f1:
7b:35:31:5c:17:e8:15:c0:d1:cf:ad:fb:22:9f:e3:fb:66:55:
23:23:fc:ee:2e:1d:97:6c:df:e0:5f:1d:af:88:ee:9a:c2:88:
86:a3:4c:92:af:01:e0:d1:a3:34:f2:13:6c:a5:71:81:56:31:
a1:8d:57:4f:ba:25:92:cb:27:40:22:36:e6:30:66:8d:20:0f:
6b:5f:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:27 2025 by rpki-client