Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa
File: 943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa (raw, json)
Hash identifier: o2tHNAP5rduVLXCosASFMxtsJw2QCTmZqPkkffhb/R0=
Subject key identifier: E3:66:F0:A4:DD:67:2E:C5:77:0F:1B:8F:35:6F:7F:9D:09:99:7A:FD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10EF9DE3779079B8DFFFE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.194.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ef:9d:e3:77:90:79:b8:df:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6c0368cf-ecc9-4e80-8ff9-cc40ae5afd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:7c:22:a1:f2:a0:00:c3:ad:bd:cb:35:fd:
34:7f:64:87:7a:21:21:47:4c:45:2e:57:c0:1e:63:
61:44:15:13:07:92:ab:c3:ed:96:78:62:37:95:55:
01:01:ff:88:25:54:12:04:24:ca:95:91:30:87:0d:
bb:c3:db:aa:a6:ad:f4:66:c5:c9:37:30:12:89:9f:
de:97:ce:79:85:49:c9:a4:fa:a5:53:a7:f1:78:35:
9d:92:d9:7a:45:01:f0:b1:a3:c0:13:8f:7e:7a:05:
f1:c6:d8:5d:f6:f7:52:52:87:5b:b3:61:15:c7:aa:
d0:92:ab:10:64:57:57:19:75:83:b2:52:7c:8d:8c:
bc:e8:60:26:94:88:8b:dd:ad:c3:93:ca:05:e6:83:
9a:ab:5e:4e:38:be:9c:97:24:28:8a:68:e9:dd:1b:
e7:b0:d2:8a:4d:3a:7a:94:cd:04:71:bc:17:c0:e4:
7f:d5:32:3f:6e:3e:dc:ba:51:a9:06:86:70:aa:fd:
0e:da:be:6d:e0:c6:ed:c2:6a:e6:cb:4e:e5:f8:d5:
7a:fd:78:d5:4d:54:ed:03:e4:cc:e4:02:13:32:b5:
04:19:b6:0c:f1:f8:b8:f0:ed:fc:75:28:e5:a7:63:
67:ea:e6:40:65:c9:bc:68:8c:b7:0b:39:28:df:08:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:66:F0:A4:DD:67:2E:C5:77:0F:1B:8F:35:6F:7F:9D:09:99:7A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943bcbc0-b8a5-3dcb-8ba3-818ff225fba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.194.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f5:e1:5d:47:f9:fd:48:f4:15:d3:cd:26:3b:06:6a:3c:c7:
f8:c6:11:e8:50:b8:9a:25:5a:0b:06:34:1b:89:69:37:d3:a2:
d8:69:1e:b9:8e:79:5c:38:c6:f3:ee:5d:7e:e9:9b:70:83:ce:
57:9c:b5:1c:c1:7b:9f:a8:a0:bd:30:14:87:ab:ea:33:38:7c:
a7:c4:db:bf:8e:fa:bc:43:dc:7c:28:4b:86:0d:9f:ed:d0:ca:
34:21:e4:e2:10:0a:f4:5b:a9:17:b7:97:94:18:3a:d1:53:69:
e1:0a:a8:0f:c0:2a:33:1f:79:2d:04:59:82:9f:01:55:31:c5:
09:91:52:29:e3:2d:84:39:ce:2c:e6:8f:21:8e:b4:dc:fb:74:
f7:77:6b:af:74:d8:0d:14:fc:09:17:7b:e9:e9:2d:e5:16:39:
3a:68:03:3f:c4:cd:8f:c6:51:49:9d:c8:37:9b:fc:5a:c7:75:
7f:97:72:ba:e4:e3:99:c9:da:6f:75:ca:8d:2d:a9:66:44:42:
56:7c:8b:02:cf:c6:cf:a6:cb:ae:14:35:c9:37:fa:15:84:49:
0e:5d:51:f9:76:bc:91:35:16:2f:23:aa:1e:39:56:79:fd:6b:
b0:03:d1:5b:1f:f2:d7:09:bf:e6:cb:54:21:70:9a:07:66:85:
c9:51:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:57 2025 by rpki-client