Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f2e0041-337d-3ff9-a9a2-a39bc5338737.roa
File: 8f2e0041-337d-3ff9-a9a2-a39bc5338737.roa (raw, json)
Hash identifier: KKmEcbDtP/IiVPnh4QqvOWiiFYoD4MCZjx1ihRiwbgo=
Subject key identifier: 3A:42:9A:C3:EA:C5:51:A6:FC:9D:3C:B4:14:8C:A1:BD:6D:5E:B1:24
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123F51BE988E7714A4FC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f2e0041-337d-3ff9-a9a2-a39bc5338737.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.230.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3f:51:be:98:8e:77:14:a4:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b1daf445-f5a1-43ee-a4b2-53b0fa8345e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:48:3c:d2:4a:27:89:77:9e:fd:92:08:60:24:
d1:83:bd:b6:66:04:08:df:d9:dd:83:62:c1:c9:90:
b5:98:a1:a0:ca:b2:9a:7f:8b:e3:88:56:b8:33:36:
e4:26:11:b9:2d:fa:49:39:06:81:92:ff:60:64:32:
ea:2a:72:b4:87:78:3b:b6:1b:1d:9c:e4:05:5c:16:
68:74:78:47:3e:ab:d1:17:ba:e0:94:5f:49:fe:03:
fe:21:6c:33:d3:f6:69:3b:8b:53:3f:c4:9a:7a:fe:
85:3d:51:82:e4:87:f1:a9:1c:a0:92:44:52:32:a2:
bb:39:63:1a:7d:db:d1:ba:32:e2:83:e5:fc:cc:e1:
a1:41:0f:83:8c:e1:9d:8f:fd:86:ff:67:3a:8a:8e:
50:95:45:e8:f3:82:42:27:a7:c7:93:3c:12:13:f7:
e5:bb:25:9f:51:32:65:81:66:a4:f3:06:23:57:75:
51:5d:54:60:25:38:35:20:c1:f4:ee:c2:34:6d:72:
04:02:0b:33:2f:45:60:7d:51:fa:e1:f0:90:dc:79:
fd:8a:82:54:97:ee:68:6c:69:43:f8:fd:d3:f2:e0:
34:05:b4:44:71:9f:57:d9:62:28:ef:53:2f:f2:80:
ad:04:fd:19:2f:5f:9c:16:ca:f8:5b:06:dd:ab:a2:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:42:9A:C3:EA:C5:51:A6:FC:9D:3C:B4:14:8C:A1:BD:6D:5E:B1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f2e0041-337d-3ff9-a9a2-a39bc5338737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:2e:68:06:ba:06:4f:9d:92:b0:14:6b:47:b3:45:5b:94:01:
c0:df:d7:93:4b:54:a9:66:34:bc:f2:20:59:f7:64:37:0d:46:
62:47:c1:5e:0e:6b:8b:fa:46:64:68:a2:0f:c4:bd:ea:61:21:
3c:3f:1c:58:9f:d2:9a:d1:ea:95:b5:a3:7e:cc:10:f0:e6:da:
05:92:42:79:0d:50:d3:33:80:9c:90:38:0d:f7:49:51:65:88:
42:ba:5b:ff:c5:00:0b:1a:5c:bd:40:ee:1f:bb:23:19:0e:7f:
fb:eb:e6:95:9c:c3:24:db:b6:ee:14:50:55:59:1d:99:34:ce:
4e:01:62:1d:43:86:21:86:f4:37:2f:44:51:d4:2d:11:51:97:
23:24:44:54:b0:8a:5d:8a:77:a2:56:8b:87:bb:73:82:9b:a6:
e6:5c:7e:b2:fe:22:46:fe:b5:16:cf:b5:7d:8c:a6:ad:3c:46:
ed:cd:01:7b:ee:27:dc:4b:c9:a8:be:75:33:61:37:4f:20:f1:
20:74:7b:58:ab:df:b9:77:9e:bc:71:a5:a9:18:52:b8:ad:60:
53:bc:28:17:2a:75:c7:ec:8f:e3:ee:ee:22:c9:5d:83:98:78:
c9:06:c2:16:13:63:e2:f0:f8:4d:39:dd:39:c2:24:fa:f2:24:
55:f8:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:51:51 2025 by rpki-client