Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5c85bc-3d13-312f-9c91-10de2a393217.roa
File: 9f5c85bc-3d13-312f-9c91-10de2a393217.roa (raw, json)
Hash identifier: uVzsx0tya3PwNW+r288d+qgNG49iBGVbQo8vhIc8qNc=
Subject key identifier: 9D:BE:DB:21:4A:D3:6A:E5:00:9F:FA:D9:09:6A:DA:46:AA:68:71:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD983B5CAD170606C26D8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5c85bc-3d13-312f-9c91-10de2a393217.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 21508
IP address blocks: 70.88.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d9:83:b5:ca:d1:70:60:6c:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=782d8e91-d802-4415-bbf1-2ba94b12cf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:ed:9d:54:78:5a:a2:36:5c:23:af:9f:cf:
3a:e1:eb:d8:52:d8:af:0c:23:09:c0:a1:85:b2:03:
0c:cd:98:0f:b0:86:87:e0:31:24:c1:78:48:50:0e:
28:08:9e:ed:1b:4a:d3:56:b7:55:ca:bb:6f:de:69:
61:77:9f:80:a7:0b:d8:65:7d:c8:4c:86:fb:f0:00:
a8:bf:07:93:c4:91:c3:05:ec:7d:6b:70:88:bf:93:
8a:1a:a9:10:26:01:5f:1a:8c:3c:a1:08:4b:6f:8a:
65:cb:75:f8:a0:98:f9:c3:55:2e:47:b0:31:07:17:
7f:a8:c0:b5:89:c4:b2:69:ee:e2:5d:34:f6:93:48:
3e:b4:39:34:14:06:96:2b:9e:98:fb:dc:86:f2:43:
03:38:dd:b2:30:ca:bf:b5:21:86:70:13:dd:89:7b:
32:47:7c:f6:6b:a5:ef:2b:c8:ca:7f:9f:ef:8b:d0:
f0:75:ec:7c:c7:f7:3f:e3:2b:db:f0:9b:66:7d:90:
a7:13:81:2f:10:c5:a0:53:0b:1a:8e:b5:3b:f6:20:
44:cd:ec:56:b8:24:c1:d0:d9:83:42:cd:70:88:79:
95:72:17:25:f5:e1:c5:76:91:ac:36:67:3a:80:58:
ce:f7:61:17:dd:3e:b4:55:79:c4:4d:12:1d:93:20:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:DB:21:4A:D3:6A:E5:00:9F:FA:D9:09:6A:DA:46:AA:68:71:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5c85bc-3d13-312f-9c91-10de2a393217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:e4:c4:99:71:35:75:dc:c6:a4:de:d9:e8:c4:48:dd:b2:e5:
3f:09:64:a6:b7:61:ef:9b:50:fb:a8:fc:0f:69:e6:08:c2:df:
50:d7:42:8a:e2:4a:41:b4:c3:7d:fd:22:81:2b:5d:d4:fd:20:
57:ae:14:3c:68:b8:92:f9:b5:28:d4:ba:18:99:a3:24:2e:dc:
33:5f:85:69:b1:89:7f:c6:56:40:1c:33:7d:8a:44:5c:d8:94:
6a:d4:00:ff:d5:a0:fe:2e:7c:b7:d7:a3:39:79:e1:3a:7c:8c:
3d:23:7d:d7:e7:d5:66:20:8e:42:69:59:2f:54:18:69:4f:1e:
cc:09:09:f6:61:46:57:ee:8a:16:33:72:ad:85:86:04:f8:4f:
65:68:6b:60:8d:6f:e0:29:7b:e9:52:49:bc:88:d7:e7:47:42:
83:66:a0:4d:1f:bc:2b:54:52:f4:f6:70:cc:ef:82:f0:c7:57:
34:17:4e:ad:b3:25:74:a7:97:9a:0e:8e:27:0d:e2:8d:6f:53:
ff:32:6c:cd:3f:dc:7b:ee:ab:7a:65:0d:2a:3d:ae:b7:ea:6e:
cc:39:16:57:22:b0:5a:35:c6:38:86:3f:f1:f1:26:5a:d1:58:
93:d2:53:ba:a3:4f:72:dd:5f:a2:e0:87:a1:53:57:d6:77:ec:
bc:00:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:09:56 2025 by rpki-client