Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8895b485-6f70-3f06-b9c5-5368137cf7d6.roa
File: 8895b485-6f70-3f06-b9c5-5368137cf7d6.roa (raw, json)
Hash identifier: XqNxKA3c9+yg9BlW/KF8it3B0lkYTzSFUKqEqPQjA+o=
Subject key identifier: 21:E4:98:2B:AA:16:2D:DC:39:45:55:61:65:3D:4C:A3:36:D0:11:6A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1330569D32C858476F8D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8895b485-6f70-3f06-b9c5-5368137cf7d6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 174.160.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:30:56:9d:32:c8:58:47:6f:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f96fb18c-daa7-451d-9f56-06c8b5b16f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:b9:b1:a3:ba:a8:f3:fe:99:36:3a:92:34:
81:0e:3e:37:4a:c6:f0:9e:34:ab:c2:15:c2:0a:7f:
11:a9:66:05:a4:a8:ff:57:32:cb:1b:32:52:ee:46:
64:ff:3b:7d:bd:40:16:3a:91:e1:38:90:04:9d:5b:
c8:90:ec:b8:74:8d:7c:59:8f:27:b1:7b:f0:87:ae:
b8:fb:25:a8:c7:b6:a1:a3:26:dd:ac:58:40:74:51:
48:31:f9:15:c1:d0:e8:6e:c1:30:99:38:94:ad:32:
0f:04:c2:b6:57:84:32:38:18:02:d7:04:be:76:d3:
7d:2f:f6:5a:7b:7f:0a:cf:89:b4:59:7d:7b:6d:4f:
37:54:5e:dc:72:47:6f:3c:40:20:b4:20:da:55:e5:
e7:98:79:c6:f0:38:a3:d2:be:4f:33:ff:93:e0:b6:
a8:bc:38:ed:ea:a7:ef:9d:6b:1f:3e:22:d0:51:1c:
24:9a:03:ec:3a:66:9c:93:d7:28:ee:32:5c:26:fe:
b1:fe:80:a1:fd:be:59:84:be:31:ed:99:e3:71:33:
03:38:fa:ee:2a:6d:d4:8d:ff:61:9f:55:05:b6:9a:
e9:1d:c1:8f:c7:36:3e:e7:2d:fe:0d:69:03:65:3c:
a8:72:d8:8e:1d:40:86:57:8b:ca:7f:d6:03:b4:4c:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:98:2B:AA:16:2D:DC:39:45:55:61:65:3D:4C:A3:36:D0:11:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8895b485-6f70-3f06-b9c5-5368137cf7d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.160.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:a4:64:b6:32:71:2d:2b:f6:7c:37:4d:71:6a:56:76:1f:4b:
f0:80:68:9f:56:cc:5a:ea:e1:5f:e2:63:f6:8e:93:1c:a9:6a:
f7:38:d0:74:fa:3f:43:e4:fd:38:eb:05:0c:50:8a:7f:e4:a6:
05:0e:18:a9:a2:a9:c3:62:53:0a:48:b4:39:29:07:99:41:85:
28:51:d2:c0:08:e4:03:25:a4:bc:09:16:d7:1a:f0:ca:7c:d5:
a7:38:34:5e:07:6c:45:13:5c:bb:55:3f:c1:10:7d:3b:92:35:
b2:18:d4:7d:ad:f2:cd:bc:8c:20:07:cc:28:f6:be:61:f4:4e:
17:40:0c:20:c4:e8:02:35:de:25:93:a3:dc:da:60:77:dc:d3:
9d:7b:f6:8f:b9:c6:fc:90:44:c8:91:05:dd:25:01:31:fe:15:
aa:ee:3a:49:73:ed:e8:46:30:f6:cf:45:42:70:93:48:d7:71:
2d:46:49:b2:e4:93:fc:29:50:6f:da:c6:d6:1a:32:6a:e6:54:
94:58:f9:0b:c2:ab:8a:fa:4e:93:43:e9:b9:0c:26:ed:ff:a9:
fc:ad:9d:c1:59:63:fd:73:da:f1:c6:61:a3:19:e2:b8:8a:ba:
7e:35:b5:13:f9:87:19:e9:a8:e7:dc:14:63:d5:d7:23:36:8c:
b8:38:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:21 2025 by rpki-client