Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dbc8429-b8af-3259-a6cf-a711b04ddccd.roa
File: 9dbc8429-b8af-3259-a6cf-a711b04ddccd.roa (raw, json)
Hash identifier: BA3T8bDMuQJjpHHkkfC6sPBeIDcOXk9oG/HFDDsNRB4=
Subject key identifier: E3:FA:CB:F2:37:77:09:27:30:2B:2C:BC:E7:DD:81:ED:E4:70:3E:DB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10F58BC83C8F1F8CA2A740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dbc8429-b8af-3259-a6cf-a711b04ddccd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.239.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:f5:8b:c8:3c:8f:1f:8c:a2:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e5493e53-eda5-4baf-8293-4c0a1ac9701b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:bd:22:71:a3:cb:38:4a:ef:46:dd:d9:2b:
7f:19:a3:b0:50:9a:0b:8a:e1:24:55:65:04:b1:40:
6f:2c:e1:c4:de:e5:bf:a2:a2:98:2a:5d:6e:ea:2e:
32:36:25:94:42:21:ac:ae:b8:e2:09:e6:55:65:ab:
b6:fe:b7:28:89:2b:e7:62:bf:88:70:82:1b:44:a6:
40:90:7d:91:c6:cc:fe:aa:00:a8:b9:0e:3a:3d:b0:
7d:6c:d0:f4:fd:f1:45:8b:45:a1:15:40:99:be:15:
54:3e:e1:c5:aa:2f:ee:f1:e6:6b:3c:00:15:3c:00:
dd:72:36:0c:92:86:9c:d9:e0:eb:fc:5c:ee:34:ea:
1a:1e:03:9c:b5:35:ca:73:fd:cb:35:20:8f:37:5e:
0f:5a:6c:fa:fb:41:a8:c2:c6:fe:76:8c:b5:59:1a:
ae:4d:35:59:9c:36:fc:e5:c0:d9:9e:41:d4:0e:68:
1d:2e:4e:01:07:66:23:20:1e:dd:00:29:07:17:a6:
89:51:1a:c9:21:02:6a:e5:23:11:63:cc:80:19:df:
04:7d:82:ca:e5:de:49:4e:fb:9f:3a:3f:cd:47:f5:
b6:3b:96:9b:2c:20:9a:3b:93:91:7e:ca:af:1e:17:
af:77:9b:58:14:f6:ff:a2:e3:04:97:c7:3e:13:7f:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:CB:F2:37:77:09:27:30:2B:2C:BC:E7:DD:81:ED:E4:70:3E:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dbc8429-b8af-3259-a6cf-a711b04ddccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.239.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:bf:fd:7f:a6:70:b9:64:39:81:59:07:ab:51:f7:5e:7f:16:
01:cb:28:b8:3e:26:a5:af:4c:da:01:f7:dc:b5:d8:7e:4e:26:
b6:b3:94:c4:02:10:70:04:94:06:62:77:9e:bb:79:fe:3f:8b:
c0:3f:af:30:cc:6c:3e:1d:da:49:d3:47:56:a0:1c:3e:45:2f:
44:d0:e5:21:68:f1:bf:cb:81:94:ec:1a:45:45:b2:f7:70:56:
1b:66:bc:40:34:d5:2d:dc:9b:cb:ff:1e:b7:0d:d3:86:2e:97:
ec:9e:3b:13:4c:23:91:80:4b:8a:3b:57:ef:26:d7:6e:a9:ee:
57:f2:38:17:d0:8c:c3:1b:e0:78:03:9a:80:0c:33:cb:ff:c5:
ac:52:8c:78:15:26:1d:61:c4:28:5d:9b:06:97:f7:8a:62:d4:
ef:4b:80:75:54:49:23:bb:fa:2e:ca:1a:81:e5:93:15:1b:3b:
de:ba:14:09:09:c4:7e:9a:e6:12:f4:f7:7f:63:8a:d9:2a:40:
59:43:e5:e9:e4:68:ca:7d:74:8a:5a:97:70:3b:d8:e6:37:12:
dd:a5:aa:46:0f:93:3b:0e:0b:9c:34:af:e3:89:e9:26:12:c8:
a4:3e:3f:31:a2:fe:17:d9:a7:c4:32:be:1c:36:39:24:db:4f:
3e:aa:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:33 2025 by rpki-client