Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5c57db-c39c-3d60-ac9c-08fa4b850de5.roa
File: 8b5c57db-c39c-3d60-ac9c-08fa4b850de5.roa (raw, json)
Hash identifier: Cjc3ZAkQ4ZGMW7qzMHOe/Lwqhr45nVmGrMc1PxzQlC4=
Subject key identifier: 73:25:79:1A:C3:87:40:11:DE:02:49:DF:34:65:0E:D5:A2:25:10:65
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11731EF39B4A5E1FDA6E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5c57db-c39c-3d60-ac9c-08fa4b850de5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 174.62.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:73:1e:f3:9b:4a:5e:1f:da:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=32c21917-ef4e-4813-aab8-a40a3f109aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:e4:a4:b8:3f:e7:c5:17:68:cc:bb:66:07:
32:34:e1:d6:c7:fa:99:1e:f7:fa:0c:dd:72:12:26:
6b:2c:67:51:46:a3:ec:ea:89:cc:80:73:4a:c0:15:
f7:8b:ff:3f:5f:05:72:c9:12:1d:8d:ce:88:34:c4:
e2:08:56:26:70:a4:fe:e2:8b:be:85:98:b7:9c:d2:
bf:78:d0:a4:28:18:ab:c1:be:5a:20:65:ab:80:54:
4e:ae:25:df:ed:d4:a1:44:0c:20:51:47:be:41:f2:
fb:4c:85:5a:11:6a:73:e8:67:42:e7:30:5f:e3:e2:
9a:7f:e1:bb:aa:d7:d1:58:07:69:ce:31:3f:30:0f:
58:bb:d4:bd:d6:04:c1:a4:95:1d:e7:09:3f:79:79:
a6:ad:3d:8b:d0:06:ed:9b:0b:2c:5a:38:c8:d9:e9:
61:b9:07:8a:fb:42:34:b6:1b:ce:db:12:82:e8:d3:
6a:44:5d:4a:b0:8d:50:08:37:37:fb:19:95:34:6c:
5a:07:0a:fc:cd:11:55:c2:0f:54:e6:0f:15:1e:04:
ec:bb:0a:98:4b:6b:6d:98:3e:3c:23:ae:94:45:f6:
08:5a:bc:dc:2b:3f:f6:91:30:5e:0b:f1:19:f3:16:
d2:4b:b9:86:a7:c8:bf:ec:2b:e3:74:a1:e4:07:a0:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:79:1A:C3:87:40:11:DE:02:49:DF:34:65:0E:D5:A2:25:10:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5c57db-c39c-3d60-ac9c-08fa4b850de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.62.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:89:34:0b:37:9b:62:ed:86:9d:bf:85:d8:ea:5d:3b:02:0b:
76:61:c2:a3:2b:a1:e6:c2:eb:d5:59:de:28:3a:29:65:0d:9a:
1f:41:a0:31:05:a6:04:a3:1a:61:90:9c:ed:ae:aa:33:d6:8e:
41:3f:bb:f3:4b:1a:fb:31:6a:11:15:85:0f:c6:18:d7:90:f7:
ba:12:59:b7:c2:ab:0a:4d:d7:0c:f1:9c:a7:29:e2:06:4a:db:
1c:9c:a5:21:6b:35:e7:80:3b:2d:55:0d:4c:72:17:b3:df:3e:
65:2d:e3:a5:56:5b:10:67:e8:75:0d:8f:1e:82:50:b2:cd:b1:
b2:c2:4e:0c:97:e5:93:59:1d:15:ed:3c:2a:ab:b6:d8:05:1c:
9f:12:1d:34:0b:d0:a0:bc:b6:4e:20:33:e2:1c:97:1a:93:d0:
4f:ed:af:04:71:55:20:75:f9:3e:a0:1a:d5:33:30:cf:2d:c0:
fc:ba:53:e5:90:bf:60:c5:aa:f3:65:70:34:c6:6a:a4:97:fe:
13:b3:d6:39:41:ec:cc:f1:51:86:9b:a5:9a:74:55:34:7b:60:
96:c8:2e:6c:8f:ae:f9:2f:9c:a2:e5:85:e5:73:b8:86:cc:13:
d3:df:03:81:5e:de:d5:e8:d5:f9:59:42:d3:c5:35:13:40:89:
54:dc:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:19 2025 by rpki-client