Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97129ceb-bf16-3d0f-aab9-119f301ed3c9.roa
File: 97129ceb-bf16-3d0f-aab9-119f301ed3c9.roa (raw, json)
Hash identifier: 9fF00qehfUAakyRdrdKU+1CUtajRiOznlIXxshTWOEI=
Subject key identifier: D8:DA:C2:59:76:EF:4B:81:40:7B:3A:C7:55:A6:76:14:82:BD:30:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CFFB4346EBE409DE7A940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97129ceb-bf16-3d0f-aab9-119f301ed3c9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 74.94.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:ff:b4:34:6e:be:40:9d:e7:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9b201b57-ac05-43d2-81d0-1091f8d1ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:fc:b3:7a:44:9c:77:c2:96:62:81:64:09:
a3:b2:64:8e:df:3c:10:85:44:52:d3:1b:3f:e8:7e:
3e:e3:6a:ef:a3:6e:3f:9b:16:86:7a:f0:6d:e4:0f:
f6:34:45:5a:b2:3d:f5:f3:41:97:f4:36:dc:77:3d:
0d:53:0e:53:bd:f8:a6:31:a9:a9:90:02:4c:1d:a0:
e3:f8:66:4a:a7:ca:49:ba:ce:1c:25:92:50:83:e8:
11:ea:9e:d0:ee:78:57:68:6d:aa:b8:b8:26:eb:01:
a1:cf:88:17:99:a2:3c:aa:35:1e:90:1a:84:3d:7d:
da:e7:33:b3:1d:de:e8:2d:e4:e9:72:69:d4:00:7f:
5b:a5:48:45:12:22:50:7d:ef:cc:e7:30:49:74:92:
4e:5d:c6:76:d6:38:67:54:79:59:1b:fc:5c:94:3f:
82:f1:34:56:a9:58:69:ad:48:e9:69:ce:f1:d1:52:
b6:dc:9c:5f:7f:35:1a:37:02:f7:14:e2:d3:92:d3:
56:da:b4:36:63:f3:e4:f3:46:a9:73:31:fe:7d:a0:
9b:e9:06:ea:b1:14:e6:51:4b:b4:61:d7:bf:be:9e:
be:19:bc:92:b2:db:b3:cc:52:98:1a:c0:71:20:f1:
41:e6:95:39:01:d0:0f:ab:79:2f:55:b0:5e:87:8d:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:C2:59:76:EF:4B:81:40:7B:3A:C7:55:A6:76:14:82:BD:30:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97129ceb-bf16-3d0f-aab9-119f301ed3c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.94.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:0e:a8:e5:a5:7b:46:f8:2c:94:62:61:02:c0:e2:3f:da:e0:
a9:43:7b:1b:eb:a6:20:2f:82:e8:90:f7:70:dc:4a:d0:2d:ed:
46:48:cf:48:70:74:ad:b6:db:6f:44:db:fe:15:3a:64:27:d5:
4e:d2:74:c7:7b:40:52:c5:7b:dc:36:36:54:28:45:20:aa:c2:
29:e5:f9:6d:eb:b7:b0:4a:64:c3:69:28:31:fe:6e:72:de:ff:
33:92:d6:29:86:3a:c9:87:90:76:cd:1a:0e:cd:d4:10:03:d6:
19:53:4b:27:c5:48:bd:ea:bf:0d:e6:4f:51:5f:84:51:3f:8b:
c0:e5:ec:46:67:24:9a:e8:d4:78:81:d1:05:14:c8:98:f9:fd:
d3:88:a2:e8:88:8a:16:5a:19:93:c5:11:73:48:ea:38:a8:cb:
d1:7a:f4:e8:bb:5e:48:05:1d:3e:8c:e2:cc:53:37:8b:0a:7f:
60:90:b2:1e:48:02:bf:ee:49:30:49:d4:91:bd:b7:b7:a4:cd:
80:26:2e:3d:25:cc:1b:55:e5:9a:20:68:9a:ca:42:64:e9:b0:
d8:1e:4c:7b:ba:2f:b4:ca:a0:9b:1f:3c:b4:47:29:b9:e7:c9:
94:2d:c4:72:dd:ea:4e:84:05:ec:66:55:8a:20:d0:2b:c3:b7:
5a:30:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:06 2025 by rpki-client