Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89afb169-1360-3eeb-80be-97a0ab258b09.roa
File: 89afb169-1360-3eeb-80be-97a0ab258b09.roa (raw, json)
Hash identifier: VvqOiEqU8zyLbDLgEWsD5MPoypNYTRKsyZBwuyxv6tQ=
Subject key identifier: 3A:C9:FF:5C:66:B7:B6:06:21:59:BF:BE:4C:0B:FD:DA:35:83:3C:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1278DEF84D879EDB6D5C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89afb169-1360-3eeb-80be-97a0ab258b09.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.176.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:78:de:f8:4d:87:9e:db:6d:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b36e786f-230d-4e7b-a7a7-83fc2c69aba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:31:5a:39:40:93:5d:f1:30:84:74:24:99:
27:95:9c:88:f9:03:99:2c:7c:ec:2f:4d:50:9f:aa:
91:36:d6:af:f7:2d:c1:21:e9:80:01:2b:0e:59:1b:
01:a3:03:36:8f:86:e9:26:93:da:f1:46:c8:cf:d5:
bf:b0:31:2d:55:b1:6b:58:22:10:67:3e:f8:8c:9a:
26:86:c4:e9:10:1b:7c:c9:2c:66:19:01:3a:0e:a1:
38:c3:20:e7:f6:b5:ec:b0:42:7f:c6:5b:a1:ef:44:
d4:ea:8e:5d:a0:ec:2a:57:b1:04:e1:18:57:9b:59:
86:3a:05:8b:9e:f5:42:b8:1c:10:d3:45:02:5e:81:
a5:07:86:f2:c0:d0:9c:16:b1:df:0b:a7:23:bb:6d:
aa:7a:69:fe:0a:2b:07:ac:ed:82:a9:38:05:7d:1b:
1b:7f:13:c9:65:0e:cc:d6:19:d5:b8:93:93:b7:8b:
65:25:68:4c:88:c8:35:01:19:eb:bf:ef:f2:6d:3a:
5f:6a:e4:61:58:5a:c8:e4:b8:5f:6a:29:02:64:52:
a3:b8:a7:30:aa:c2:45:34:25:70:55:1d:34:c1:d0:
c8:e6:f2:d3:e6:9e:5d:28:87:2c:13:5e:d2:ab:92:
82:4f:79:2e:bb:70:7f:51:90:97:57:8c:66:6d:92:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:FF:5C:66:B7:B6:06:21:59:BF:BE:4C:0B:FD:DA:35:83:3C:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89afb169-1360-3eeb-80be-97a0ab258b09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.176.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:87:f9:c4:95:1a:c9:1d:21:a1:80:20:04:47:94:49:92:82:
52:3a:0d:c6:63:90:a3:0e:c5:1e:d6:0c:af:64:09:c8:cf:9a:
19:fe:fe:71:eb:2a:9e:68:38:a3:eb:b6:0d:2c:41:71:f9:18:
72:cf:6d:b9:bd:32:7e:df:25:3b:5b:f3:45:35:c0:9c:d3:2b:
98:6f:a9:30:01:45:35:42:e3:d6:48:62:21:5b:45:a9:12:9c:
4e:8a:bb:14:26:87:d8:b9:b4:c8:d1:5d:9e:f9:64:38:bb:ce:
45:1d:a7:43:93:cd:d4:ea:f8:44:e2:25:98:17:e0:7c:14:8f:
45:49:7c:a9:62:03:74:7f:87:0d:eb:d9:52:1e:18:5e:3a:91:
28:9c:a2:6f:9d:93:f5:0f:72:8f:c4:f2:d6:ca:d3:41:fe:dc:
f7:e0:cf:25:d2:d5:36:f9:e6:6c:df:87:f4:21:32:68:fb:1c:
2b:2e:05:21:f6:23:7c:37:7b:50:26:71:b0:f6:63:de:aa:8b:
27:37:a1:da:74:41:40:ed:db:b7:44:0c:27:8a:46:09:4a:5e:
9d:d4:58:3e:63:8a:48:bc:b8:ae:f7:55:72:9b:e5:17:f8:d3:
30:3f:e0:73:ac:fe:56:c8:58:d9:d5:92:96:e6:f0:ce:5b:92:
a0:84:35:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:22 2025 by rpki-client