Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff82a17-afe7-3ea8-93a7-7be478da6a62.roa
File: 8ff82a17-afe7-3ea8-93a7-7be478da6a62.roa (raw, json)
Hash identifier: npNZ+7cnWiLmbg7Q2iEjoNCtAqBUUJdsFl6zKRzqekk=
Subject key identifier: 63:1C:D1:E9:ED:17:90:6D:F4:B5:5C:F8:4B:82:44:7D:5C:95:C6:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10BAD2CB4BCA925AE7F180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff82a17-afe7-3ea8-93a7-7be478da6a62.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 174.173.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ba:d2:cb:4b:ca:92:5a:e7:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e7ab7677-b037-42d5-a505-32d124910211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:b3:97:fe:3b:71:3f:94:08:29:8e:fd:0d:
55:7e:2d:c7:9d:19:f0:86:e3:dd:ca:a5:22:b4:58:
8f:49:e9:93:3d:7e:cb:2e:c5:c8:c4:78:1a:85:45:
09:c0:e3:62:f6:ed:32:be:d1:0e:2b:ac:66:ea:f3:
c1:77:75:30:57:1d:3a:68:e9:29:3e:e4:9a:8b:86:
75:55:59:0d:81:4a:ef:87:3e:32:ae:43:68:9c:f9:
14:b7:92:6f:ff:23:c4:b8:0c:ec:3b:b2:93:2c:fc:
e3:75:bb:3b:94:3c:6d:82:1d:cf:b9:db:a3:77:43:
12:0a:0d:e5:11:b4:d2:94:38:c7:e9:bb:dd:e8:85:
f3:87:ee:80:0b:49:47:a9:ad:a5:21:f5:01:90:f7:
2f:75:90:16:6d:3f:46:42:66:03:ab:c1:91:67:88:
da:b8:3c:42:51:df:c2:17:32:ac:a6:51:18:a3:6e:
c2:7e:e3:67:bf:55:1e:50:86:57:c3:73:4a:38:6d:
64:d8:41:c5:f3:8a:b5:50:7f:0d:44:9e:01:45:50:
44:c4:66:68:70:61:5f:37:ff:42:59:75:9b:e5:3d:
7b:38:3f:16:37:57:44:65:b1:a1:7e:10:eb:77:cb:
a6:a4:2c:1d:d2:df:83:99:e7:f9:ea:a7:7b:ea:a6:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1C:D1:E9:ED:17:90:6D:F4:B5:5C:F8:4B:82:44:7D:5C:95:C6:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ff82a17-afe7-3ea8-93a7-7be478da6a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:b1:40:87:63:ef:7d:da:04:ea:cc:0d:07:35:28:78:ad:ac:
b8:ca:28:3a:0b:0d:00:31:61:86:68:b0:90:1e:12:16:a0:5e:
1e:dc:a8:c7:f1:ba:b6:96:2f:55:07:52:f5:21:e8:e5:81:ec:
a9:64:5d:75:17:f3:32:2f:5f:e8:23:82:c0:29:c9:91:6a:46:
3c:9a:11:1d:70:bc:75:10:89:48:c6:76:80:99:6d:63:48:56:
65:dc:32:2d:ef:f5:f6:38:78:5b:27:7b:a1:c6:64:40:0d:d8:
ae:8d:b2:66:f2:62:11:36:b7:ba:b6:94:5d:32:3c:2c:a9:b9:
3d:fd:39:6b:05:a2:40:f1:dc:87:7a:3e:16:90:7c:65:95:71:
a8:6b:54:69:c0:87:3e:40:6c:d7:67:4d:62:2e:c5:58:61:9f:
7d:bb:c4:c3:79:72:e5:6a:3b:88:af:04:4b:be:b8:cd:86:23:
75:83:f4:6a:16:49:da:d6:31:0c:ec:fc:cf:64:69:2c:89:5b:
17:60:9a:cd:87:29:5f:61:c4:40:20:3a:68:e1:d0:9c:cd:dd:
88:81:1a:d7:ef:b9:90:ca:8f:fa:b6:07:ef:83:01:f8:54:5c:
1e:4c:1a:eb:a3:3c:54:e6:29:48:f2:16:ba:9d:fd:f5:3a:29:
b0:50:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:45 2025 by rpki-client