Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a561eb9b-e285-3d7a-98b6-e24bba101546.roa
File: a561eb9b-e285-3d7a-98b6-e24bba101546.roa (raw, json)
Hash identifier: xlB/yxcpANhT0oJkEnUGNa5SU7sqCYNgY1hzGdj1aTs=
Subject key identifier: CF:79:22:F1:EF:BE:4E:BB:10:DB:88:34:83:94:C3:10:69:57:E1:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1274D757646C1D81042080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a561eb9b-e285-3d7a-98b6-e24bba101546.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.167.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:74:d7:57:64:6c:1d:81:04:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5f051eab-b51f-40df-b8ce-7892773941da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:2f:12:85:6c:3e:ff:0f:40:54:10:3d:8a:
de:a9:5c:be:a7:be:57:35:57:63:a8:95:95:0e:75:
8f:b3:05:12:61:a7:58:35:e0:2d:8d:bf:29:06:72:
d3:7a:74:d0:66:e7:df:97:c2:43:4f:04:fb:b7:0e:
db:c9:54:19:dd:36:2c:dc:14:5c:4d:fe:37:5a:f7:
68:3e:2c:85:2d:a4:bc:51:b1:10:56:87:1c:e2:af:
95:40:26:ac:f2:9e:a6:f1:c1:be:88:5f:29:cd:99:
ec:84:3a:d5:bf:cb:c7:54:fc:22:1b:04:11:2a:81:
4c:af:4b:d0:72:02:44:7c:fc:86:80:e0:37:35:bc:
39:36:80:a7:27:e2:25:af:57:3e:e5:9c:d2:e6:73:
84:ea:1a:70:fb:f1:4f:b7:a8:b8:60:c0:ed:09:1c:
a8:d2:24:5c:9c:e6:64:80:72:af:17:c8:7b:09:f9:
fb:4e:52:dd:22:8c:19:d1:b2:83:a2:45:47:c3:83:
5b:e6:8f:b5:b2:b0:21:02:9f:d5:71:e3:f8:2d:aa:
5d:1f:bf:c7:13:a1:59:58:8c:11:9e:31:ee:84:42:
fd:40:db:85:0c:fc:73:64:f6:19:c9:b5:e4:4f:97:
98:fc:05:a9:cb:c0:05:9e:da:88:d0:64:32:d0:d5:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:22:F1:EF:BE:4E:BB:10:DB:88:34:83:94:C3:10:69:57:E1:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a561eb9b-e285-3d7a-98b6-e24bba101546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.167.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f3:84:c2:10:ac:4d:d1:cb:d9:42:e4:55:46:8e:dd:b7:f8:
34:66:a6:5a:0f:cd:73:b9:f4:4c:2a:f6:5c:24:d8:af:9b:10:
02:a5:2c:4b:04:af:8d:42:74:3b:c4:d6:43:77:c4:9e:90:6d:
be:b4:56:f1:33:fc:2f:bc:5b:50:6d:44:f5:90:53:9d:8a:26:
28:dd:a1:14:ac:65:11:8d:b3:c5:f6:9e:6f:94:2d:f8:f0:83:
90:d0:ce:4f:e7:72:11:a0:d3:6b:71:c6:9f:f5:c6:29:e0:49:
1d:72:13:42:d4:a6:12:1f:6a:2e:2e:21:b8:8f:b8:38:2f:c9:
75:af:fa:26:f4:de:d9:cf:74:ed:62:75:14:a1:ca:a7:c1:1e:
33:be:f5:fe:17:a9:0a:0b:ea:01:b4:c2:aa:33:d8:2a:d2:96:
40:a3:d8:44:bb:9e:bb:03:78:5b:90:a4:7d:3d:ca:6f:a9:d1:
34:de:6e:52:b7:93:12:9d:de:a6:e9:b8:9b:a1:3e:c8:25:e9:
2f:c5:2e:7d:0e:19:c5:d7:e1:1a:3a:91:da:57:8f:f7:f2:bf:
6a:f5:94:f3:ba:cc:a9:c0:87:7e:77:23:ae:2c:1d:d6:7b:de:
92:db:51:c2:cb:e6:0e:5a:b5:87:73:3b:09:78:10:33:b2:cf:
ac:7f:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:40 2025 by rpki-client