Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8fbf3b-855a-3bd0-bf61-ae0958517819.roa
File: 9b8fbf3b-855a-3bd0-bf61-ae0958517819.roa (raw, json)
Hash identifier: YZWvTO+uYtNOJYPtmBn9sSsg/n46x+V1iZIr9iCVx7g=
Subject key identifier: D9:EF:7E:59:2B:53:CB:D1:1D:06:16:70:A0:52:E4:F9:C0:1E:66:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FB2036F5EEE7CAA8DEBB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8fbf3b-855a-3bd0-bf61-ae0958517819.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 174.170.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:b2:03:6f:5e:ee:7c:aa:8d:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=19af3d5e-fdca-4fce-8048-ce3d8bf7401c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:50:b1:44:d6:3e:2e:af:7b:64:61:a1:d6:
b6:a3:23:69:dd:7d:34:09:75:f7:39:e1:52:f4:27:
2a:ae:cd:aa:35:4e:6a:bf:8e:22:6c:b5:64:dc:97:
87:11:6f:4f:40:cc:0a:21:b7:88:d9:dd:a7:6a:2f:
94:25:bb:0b:6b:8d:b6:a9:85:94:17:46:99:3e:c9:
eb:c1:2c:d7:c3:8d:8c:5f:d4:49:be:e2:3d:01:68:
88:31:40:ff:53:ad:d4:6e:ef:33:a7:8c:c6:61:32:
df:75:5a:7e:46:fa:e4:76:40:44:13:c4:67:a6:03:
f9:45:89:10:94:34:d8:d9:62:c3:00:c5:57:1b:16:
08:df:9c:8f:ab:ac:d1:76:ee:b8:a6:57:f9:22:19:
1f:a6:80:6b:7d:58:0b:c9:ed:1f:56:76:00:9a:d9:
89:84:84:87:05:fb:10:ca:b6:79:52:da:5c:be:16:
3c:ed:24:a6:c1:d6:ee:61:6e:b7:0d:43:e2:25:f5:
1c:ad:e9:15:82:2e:ca:2f:e3:f0:76:9b:a4:56:18:
eb:1c:ab:53:76:2e:cd:51:4a:c4:b6:98:25:7f:36:
7e:2e:d9:7a:23:47:6a:6b:c6:c3:56:f8:ef:84:70:
02:2e:41:48:d2:a6:f1:90:34:d1:db:1d:90:79:57:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:7E:59:2B:53:CB:D1:1D:06:16:70:A0:52:E4:F9:C0:1E:66:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8fbf3b-855a-3bd0-bf61-ae0958517819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:99:c6:46:cd:c4:20:86:8c:b0:30:f1:90:ed:04:f7:af:83:
9b:ab:f7:22:7d:ea:48:2a:08:32:2a:33:fb:8f:56:92:4a:10:
41:76:8e:33:f5:c6:5b:1a:cc:68:50:0b:37:74:5d:af:33:db:
28:79:e0:ec:d1:f2:7f:21:03:65:b6:ca:40:45:64:c3:1c:b3:
ae:2a:d9:9d:56:17:a5:99:f2:92:ff:f1:0a:66:7e:f9:95:ff:
e2:a6:ed:dd:bd:ff:76:d4:7f:92:58:27:aa:49:81:be:23:76:
1e:2a:03:33:c1:e2:60:f0:9b:df:67:80:cb:3e:c7:49:a4:10:
01:64:fd:0d:65:b0:41:76:ef:d6:83:9c:d2:12:9b:ae:41:3d:
2f:7d:8b:c8:c4:8b:89:dc:8f:c3:72:60:e7:2b:f1:73:8b:29:
f2:e9:fd:82:60:8f:69:e8:ea:68:d5:44:79:2d:b9:5e:25:a3:
fc:60:79:63:9e:c6:19:47:ec:f8:f4:e9:8f:02:55:f0:89:7a:
63:a8:90:6b:e1:10:70:9b:c5:c5:fc:4f:d5:50:df:71:01:99:
23:1c:b1:f2:d8:1a:79:0c:92:72:35:97:4a:f4:b8:88:83:3b:
5b:b9:e3:91:11:f5:d5:c2:d3:c4:0e:3b:c5:69:ff:34:0e:ce:
71:65:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:09 2025 by rpki-client