Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f3168bc-23ad-3f22-93a0-4c3aa8d03710.roa
File: 9f3168bc-23ad-3f22-93a0-4c3aa8d03710.roa (raw, json)
Hash identifier: KG1n4gRSEaId1o+V/0N+EtEOJaB7uNZgT6N9GoI8uTw=
Subject key identifier: 79:C4:31:82:1D:58:0E:2A:DF:A1:3B:34:7A:31:0D:3C:FA:81:DD:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1398482D469FAE8FBFCA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f3168bc-23ad-3f22-93a0-4c3aa8d03710.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 71.198.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:98:48:2d:46:9f:ae:8f:bf:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0c179bc2-2f2e-453e-8b0b-dc0f8c1d5a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:72:ce:e9:82:e5:2e:5b:d4:a3:f4:50:90:
f9:fb:71:f7:ff:77:0e:f4:e9:bc:bd:fb:34:cd:56:
29:cd:53:b1:c3:a4:9e:5d:54:02:90:eb:56:64:1c:
68:db:82:3d:cf:c2:4b:e7:5f:08:2f:c8:45:16:da:
5a:e6:e4:b2:1e:54:f5:1f:0f:4b:0a:b1:cf:5d:11:
58:b7:1f:98:0e:ea:d1:62:29:4a:55:ec:88:36:e6:
a5:d4:d5:43:30:63:dd:4b:34:92:48:ab:0a:56:d0:
91:e2:08:06:97:63:04:d6:69:25:1c:bc:54:83:b7:
1f:e5:bb:01:6d:72:3f:c5:29:6d:e6:45:4b:0b:89:
41:01:aa:aa:f0:48:a2:0e:1a:e5:74:2d:2d:97:b4:
6c:fb:a6:2c:83:ed:06:8a:04:e1:cb:73:c3:bf:b9:
7c:41:76:d6:cb:f6:37:24:92:4a:78:6e:fe:ab:0f:
f2:f9:7c:3d:eb:e5:d0:47:0a:55:3b:1b:7b:ec:a0:
ea:fa:0d:a8:16:7d:f3:c5:2d:f5:ad:ad:13:e7:3c:
f5:09:10:34:6a:b7:9c:e4:e1:b8:b0:00:d0:5f:bc:
bd:d8:cf:be:44:2c:04:f2:11:f2:b4:92:5e:f6:43:
e6:3e:e4:0c:92:a3:75:05:47:1a:b6:2c:d7:05:cc:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:31:82:1D:58:0E:2A:DF:A1:3B:34:7A:31:0D:3C:FA:81:DD:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f3168bc-23ad-3f22-93a0-4c3aa8d03710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:61:4d:04:78:de:55:33:5d:81:11:e4:67:34:05:9e:f1:d1:
52:55:fb:c3:7f:b5:59:56:12:fa:b4:e9:dd:e6:6f:fa:b4:32:
45:9e:57:c0:80:30:10:a2:73:e2:7d:28:a1:c2:ad:61:b4:a1:
14:37:78:fe:27:88:be:1d:7a:ec:8f:c0:51:bd:79:2f:a8:21:
3a:78:a1:20:47:a0:fe:1f:e8:41:03:84:7d:ad:98:64:14:08:
9d:75:10:e2:32:17:01:f6:b9:11:76:38:0e:67:7d:cc:03:1e:
86:6d:52:7d:82:73:6e:01:07:a3:36:8d:ab:90:b7:6f:6f:78:
b6:80:b5:cc:2b:09:3c:0c:df:14:1e:33:c7:40:06:e8:80:d5:
51:63:29:0e:dc:47:5b:77:3b:0d:ed:62:3e:09:d6:ec:0a:63:
4c:39:c5:c7:c8:99:f7:2b:24:47:d8:78:87:5c:5b:18:fc:e1:
b8:3f:2b:83:d0:b6:62:95:bd:7a:31:a8:63:47:2a:01:13:ec:
ed:98:4f:bc:33:5a:a6:b2:4d:de:b8:a0:78:2f:3d:2f:78:df:
cb:52:86:9e:4e:b4:81:04:79:1f:99:ff:ea:70:6b:b7:21:cf:
64:34:22:b3:47:38:8b:aa:80:24:16:7e:7d:1c:3f:91:a5:f2:
74:51:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:53 2025 by rpki-client