Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7b21f21-6fe0-31ac-a514-9b9973d8e829.roa
File: a7b21f21-6fe0-31ac-a514-9b9973d8e829.roa (raw, json)
Hash identifier: zRx3tDxahKcyPs1K/sjjq44gxLlzwVvl+aqGmxhBzcg=
Subject key identifier: DE:70:2B:BA:8D:2D:F1:9F:02:D5:C2:25:03:33:52:F5:CF:23:63:F8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D00DE9F0E14F4E30A6000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7b21f21-6fe0-31ac-a514-9b9973d8e829.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.189.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:00:de:9f:0e:14:f4:e3:0a:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=24416fbb-458c-4941-a2e2-af62e303df71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:a5:02:5b:dc:42:55:fa:ab:39:34:a0:74:
08:9d:88:f3:2b:f6:5b:ec:95:3c:bf:50:cf:9e:29:
6c:73:81:09:d4:fd:96:2f:b3:42:88:0b:8a:8e:fa:
01:09:8e:3f:c1:72:76:cb:46:a5:37:53:12:b3:65:
d4:24:67:de:23:7f:a1:67:db:80:0f:5e:11:35:3e:
d8:2a:bb:aa:44:e8:06:c5:a2:dd:c5:ff:17:28:22:
0b:d8:ba:54:d2:be:12:82:c6:40:38:48:1a:f3:15:
57:71:69:70:67:c3:9f:27:b8:d4:e0:2c:ec:40:68:
95:ed:0f:07:4e:b4:42:8d:6f:d4:a0:66:17:34:2d:
45:e4:35:e4:79:00:fe:37:3e:d6:c3:03:24:cf:f6:
16:10:e3:94:a6:89:de:df:8c:50:b6:eb:27:fe:76:
f9:51:fe:56:c6:92:92:9d:a6:43:aa:d5:b5:8f:0e:
37:18:a5:53:e2:1d:2c:e0:9f:0c:00:06:62:e3:43:
87:17:08:fb:fa:0e:e3:6f:40:5e:c0:2d:b7:4e:03:
93:f5:f3:99:68:78:ab:50:e7:fb:95:8b:52:ea:39:
bf:8b:6d:98:91:70:50:6e:f1:8c:38:40:fc:ba:5d:
33:ca:7a:65:20:a7:90:62:39:3d:d5:ba:a1:bc:da:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:2B:BA:8D:2D:F1:9F:02:D5:C2:25:03:33:52:F5:CF:23:63:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7b21f21-6fe0-31ac-a514-9b9973d8e829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:41:00:03:5c:3e:74:33:a6:e5:c7:e3:8d:51:56:c3:b8:2a:
43:c2:49:2d:9e:e1:20:5d:4f:50:4a:d6:6c:1b:b3:1e:ba:89:
77:83:55:3f:2a:c0:c3:1d:c4:f6:be:c6:cb:98:7a:06:56:91:
ff:8c:9b:bb:d0:37:74:75:36:dc:2e:64:93:46:bf:ba:d4:ef:
61:e7:7c:b6:be:16:37:48:71:6a:ed:a5:22:6a:f3:7a:06:89:
3d:7a:23:d0:20:16:df:65:1d:7c:e0:31:17:72:ad:11:48:a3:
72:3e:0d:8e:64:ed:66:bf:b3:98:6f:0b:bf:b7:4c:2a:6c:84:
67:06:06:43:22:fe:31:d6:63:0d:c5:44:bc:3a:fe:27:c5:3a:
21:80:0f:ef:01:21:f0:7d:52:3f:17:1e:c1:ba:76:1d:48:a5:
93:86:df:17:59:98:76:4e:3b:7c:bb:6f:ac:76:fa:a2:78:fc:
3b:49:08:24:0f:02:f1:b7:2d:13:1e:a2:a8:a1:9c:72:e6:bb:
5c:0b:d0:e4:7d:97:20:73:4e:94:da:08:e1:48:c6:58:82:bf:
f5:de:98:f1:28:b9:b6:02:73:4b:0e:65:be:b7:e0:16:8f:e0:
98:18:79:53:62:19:fd:b2:ed:dc:17:8b:b3:c9:b8:be:72:93:
34:6d:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:13:43 2025 by rpki-client