Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942853ad-81f7-3d58-8678-2e238c1ee6c1.roa
File: 942853ad-81f7-3d58-8678-2e238c1ee6c1.roa (raw, json)
Hash identifier: d6SgoWVT4Lu9bQ3DPg+RmuLOet3SfCx80+QDiX1Ka3s=
Subject key identifier: F8:8D:22:73:90:55:54:E8:3E:30:2D:52:51:A4:DF:3D:47:89:AD:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1290BCF84CAB3F94472C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942853ad-81f7-3d58-8678-2e238c1ee6c1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.239.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:90:bc:f8:4c:ab:3f:94:47:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4c4ea626-ee9b-4388-bc5b-95f55dbbb538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:64:fc:81:6d:1f:74:84:3e:e2:c3:9f:8f:
cb:a8:35:b6:17:c0:d0:87:3d:c8:d6:75:19:d7:33:
d8:41:03:e4:9e:4b:21:8b:a1:6c:52:ff:f1:c1:be:
9a:11:00:45:f9:f6:73:9f:4a:d2:fa:37:fc:21:71:
7c:a6:dc:0c:ff:a0:ae:a7:30:61:65:ed:76:29:4e:
4d:95:b7:63:24:e8:be:15:ec:a7:ec:fb:c9:08:8e:
3c:52:59:ed:a0:11:fd:ce:7b:92:be:7b:e9:53:03:
85:6f:4d:44:23:e8:f7:bb:d4:66:72:73:cd:71:24:
93:94:2a:4f:01:28:f1:a4:9f:cb:7c:32:ff:7f:07:
05:4c:e4:05:fd:b9:af:aa:d1:13:94:23:8c:bd:cc:
19:82:1b:b4:a9:74:d7:bc:35:62:4f:6e:3d:c4:41:
df:e1:12:38:56:9c:58:c9:58:b7:15:15:2e:d7:fe:
23:d6:c7:4e:62:67:42:ea:31:94:8f:3e:b6:5e:85:
8c:0d:52:7a:ca:21:e0:6b:ec:27:31:1e:a9:c8:ea:
93:e0:38:bf:b1:51:fc:eb:52:57:c8:d5:7d:7c:e9:
32:12:62:74:d1:c2:a0:34:be:f3:02:58:bf:cb:48:
55:19:71:75:09:70:1e:a3:ba:9b:74:e3:73:54:a1:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:22:73:90:55:54:E8:3E:30:2D:52:51:A4:DF:3D:47:89:AD:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942853ad-81f7-3d58-8678-2e238c1ee6c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.239.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:d7:94:c2:cc:56:40:34:e0:66:9a:31:07:d3:47:a2:d5:ea:
57:f5:72:35:fe:d2:53:9b:80:7b:68:1b:5f:f6:dc:9e:51:a2:
33:42:54:57:7e:eb:01:ab:ac:8f:7c:6c:09:57:a2:47:5f:43:
e3:1b:1a:b2:9e:26:12:24:2f:29:28:20:00:89:73:0f:cc:2a:
df:e7:15:d2:49:6c:f0:cd:81:71:da:04:9a:d9:5c:a0:43:2f:
a5:da:6a:3c:eb:7c:ff:f4:03:29:99:40:eb:e8:e9:b3:d0:f7:
af:95:ef:db:10:bd:22:98:3d:f7:4f:8c:91:c6:bf:50:b6:82:
48:a5:6a:bc:35:b6:c1:9d:4e:ee:24:30:c9:9b:02:48:a3:57:
e4:d8:e2:0d:52:57:7e:ba:da:b9:9f:98:5c:4e:c0:bd:29:d8:
c1:eb:3a:57:0c:96:96:16:ee:5d:22:da:1b:c3:b6:95:85:81:
04:2c:00:7e:dd:18:17:c7:45:62:91:ea:1a:83:54:f6:68:54:
96:4a:c4:58:7a:70:79:24:6e:8a:d6:15:b1:d0:06:6d:84:61:
eb:7e:93:03:7f:d3:0c:7f:6e:8a:82:f5:b0:cd:e2:3c:b7:52:
b3:17:96:7f:f8:a9:47:02:c2:1e:6e:1e:b0:0f:9f:9f:ef:4c:
0d:9b:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:25 2025 by rpki-client