Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa
File: 89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa (raw, json)
Hash identifier: tZrOK62LzRIxw2ROQxhZ7Yw4VBYUoITn/ji1aG53AAA=
Subject key identifier: 98:8C:DD:52:C2:A0:38:40:93:44:84:DB:FD:C0:E1:9F:96:DD:A3:33
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D091D8AA301DB063DE5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.236.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:09:1d:8a:a3:01:db:06:3d:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7becb9df-7cc1-4c40-941d-51aeecd4ea0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:e9:cf:61:fe:7a:33:38:56:73:2b:bb:ae:
53:e3:c3:b6:49:76:57:44:c7:54:ab:34:b1:b6:19:
24:4d:a2:22:84:de:17:be:ac:8a:00:7b:39:01:4c:
c1:72:50:24:d1:76:d9:77:48:a0:6c:92:5b:3f:1b:
81:a8:98:26:d0:c2:a1:4b:5e:1c:e6:97:ea:00:66:
f3:3d:ea:4e:1b:1d:29:c1:82:50:e8:4e:ce:6b:7a:
b4:28:d0:79:2f:4b:75:da:8e:9e:f1:3d:41:2d:a6:
39:51:1e:3d:12:47:66:35:06:a1:f6:e8:fe:3f:21:
0c:d8:54:a6:02:5c:5e:f5:8e:13:8b:db:76:a4:c5:
87:10:28:9e:28:25:49:43:57:9d:13:25:ca:ba:dd:
79:b4:0c:16:3c:2a:ca:11:6a:b0:72:7c:71:c5:81:
ef:d7:46:9d:d2:e1:24:44:4d:1e:e2:7a:18:aa:ae:
c3:d7:95:7b:26:e9:42:59:5e:32:3a:97:04:11:50:
c8:58:6a:c2:97:5d:6c:46:b2:6a:b2:d9:45:89:62:
68:fe:48:63:16:c8:34:93:e8:5e:ec:f7:13:51:99:
f4:4f:fe:2c:c0:d5:b8:6b:9e:c1:e3:b1:df:aa:7d:
34:c8:a1:91:1f:a4:45:1d:ce:70:e3:1c:d3:b2:d9:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:DD:52:C2:A0:38:40:93:44:84:DB:FD:C0:E1:9F:96:DD:A3:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.236.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:fe:08:12:4d:03:4e:1c:b4:25:19:96:01:7f:34:2f:6a:73:
d6:b1:5a:d7:6e:6b:dc:bb:7d:d5:10:db:b2:b7:db:81:de:c3:
10:9b:af:64:35:97:16:6d:7c:32:5b:61:44:a6:c4:b8:70:47:
8d:60:34:7c:5d:93:38:bc:c5:2d:d5:16:f6:bc:78:12:c3:84:
93:91:5b:c8:f1:d3:51:f2:8c:c5:55:cd:6a:1f:b8:30:c0:22:
4c:5a:3f:2e:76:90:a5:ce:ff:8f:a5:0f:e9:0d:aa:d2:ac:a2:
90:ba:15:14:d1:97:58:1f:27:e9:70:07:ce:d8:55:0f:8f:b0:
be:cf:7a:21:65:8c:da:a0:71:66:8c:c3:3c:59:b4:d6:b6:af:
a0:26:54:a8:b9:89:b1:01:a9:1a:2c:40:43:7c:62:a9:f0:ff:
d7:7b:61:7b:73:81:da:21:78:0e:82:83:83:e4:d0:d0:fc:c4:
69:b9:d1:06:10:ed:7f:b9:ea:8c:1a:47:ae:76:d1:f4:0f:2e:
da:ac:0e:17:a6:8c:c0:56:7b:61:1c:ef:12:25:dd:fa:9f:2f:
bf:a7:92:d3:43:aa:c0:71:db:b0:50:ae:43:5d:02:83:f4:56:
a5:e9:cc:32:54:60:46:cb:b2:51:c4:dc:4c:46:96:52:7a:c8:
1f:d2:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:56 2025 by rpki-client