Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4ce04a8-1aae-3739-a074-24b12f8136cc.roa
File: a4ce04a8-1aae-3739-a074-24b12f8136cc.roa (raw, json)
Hash identifier: c0emgASrWNP8cXZpNE4YN6NoLEWIJYgnqODWBbOLXDY=
Subject key identifier: BB:84:E9:73:D5:AD:54:CB:EE:90:BD:62:0A:95:74:3F:21:F2:57:06
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E6125C15AA1DA996D47080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4ce04a8-1aae-3739-a074-24b12f8136cc.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 71.59.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:12:5c:15:aa:1d:a9:96:d4:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=ac33637e-c34b-4ec7-baa5-51a1a3199ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:62:f8:0e:a9:8c:4b:df:d7:01:5c:c8:b0:
b0:39:0d:29:41:b4:26:79:aa:c0:69:31:3f:ef:f0:
59:f8:29:8c:9a:fe:9a:49:b3:1e:e5:37:76:00:0a:
f4:c5:22:30:22:ad:36:f3:fe:71:19:6c:60:35:6e:
64:24:df:7c:eb:fc:5e:8a:bf:02:47:bf:22:6d:94:
a9:e6:ef:9a:fa:8f:7d:7d:c1:ad:0b:cd:fd:9e:57:
f9:a3:04:5c:52:ff:f4:c9:19:4a:ba:87:12:2a:c3:
2b:54:ac:db:88:d4:92:b7:78:f3:20:bd:34:e2:d1:
a3:e1:50:80:23:37:4f:16:35:8a:60:c8:b0:c7:9f:
62:aa:9f:ac:e2:34:9b:12:c7:69:70:02:77:de:1d:
6c:c4:15:95:09:be:fa:73:72:09:ed:fd:2d:e6:74:
13:0b:46:91:19:a7:35:02:46:cb:21:4e:7e:be:3f:
ea:b2:34:f3:03:3a:b6:fc:3c:cf:b5:35:a8:2e:4a:
39:68:94:b2:1a:5d:bf:ca:c0:d8:a9:ba:56:73:01:
cc:84:c3:aa:e0:78:9a:91:72:61:4b:00:c8:f2:b9:
2c:e3:d1:af:a5:d9:18:3a:22:e2:f9:18:de:b8:90:
85:4e:ce:81:d9:ae:9c:66:6f:a1:f4:36:60:20:24:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:E9:73:D5:AD:54:CB:EE:90:BD:62:0A:95:74:3F:21:F2:57:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4ce04a8-1aae-3739-a074-24b12f8136cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.59.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:f2:59:5a:19:cf:8e:8f:e8:fc:a2:c4:50:e2:be:15:d7:2e:
d7:9d:fc:c2:f1:de:b9:43:47:4d:26:f6:10:a6:a2:1d:16:67:
68:74:00:a5:e2:57:1d:71:8c:88:b6:ed:0c:7e:a6:59:d2:0c:
08:d4:6b:17:78:7e:c4:34:43:10:5f:56:e9:a5:7c:e7:97:c5:
c3:30:23:ef:40:8e:0c:25:c4:96:26:97:7b:db:eb:42:18:ff:
de:b2:8a:81:74:a7:53:32:2b:34:0e:e9:3c:38:85:76:87:cd:
af:1b:b0:33:f3:30:0b:ea:35:83:01:c7:64:f3:2a:2e:54:92:
92:01:52:b3:5e:03:81:35:a3:c0:2f:1d:ac:49:ff:de:fd:ba:
2e:af:fe:fb:85:0f:7b:1e:b7:8d:92:18:41:cb:a2:f1:6e:5d:
24:dc:21:08:6b:6e:c1:49:80:bf:56:9f:f5:9f:75:8b:15:80:
d0:bb:45:48:b0:fa:a5:cc:3b:cb:8a:18:97:b0:af:6d:f1:22:
a3:fa:76:29:fc:c6:c8:ca:ed:53:3e:df:58:63:40:06:3e:24:
b2:b7:11:7a:22:62:c0:3d:27:3f:d6:2a:b4:39:40:c8:d0:ad:
d7:48:5a:1c:de:97:2d:69:8a:df:2c:19:a5:85:40:18:cd:33:
ca:d6:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:20 2025 by rpki-client