Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ec1c2b-a91e-3160-8b63-27cdac59a9f1.roa
File: a7ec1c2b-a91e-3160-8b63-27cdac59a9f1.roa (raw, json)
Hash identifier: 99tl0S06HuIiOf9pR8aQf/cAeP0jWz/9tKQ4CjmdPyA=
Subject key identifier: 5D:1D:90:3B:67:57:9D:5B:F5:38:22:AB:7D:19:BB:9B:AC:D2:6E:52
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11DC0AF4B6DB9C61B6D240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ec1c2b-a91e-3160-8b63-27cdac59a9f1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 71.199.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:dc:0a:f4:b6:db:9c:61:b6:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7df73fe4-6192-4308-8ba4-7fd76708aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:f8:51:96:72:28:82:20:22:fe:c7:a3:ac:
2b:26:07:87:c0:01:1e:22:11:e7:9c:28:ae:2e:17:
d3:6f:3c:ee:32:c1:34:4f:d8:13:3a:b1:bb:4f:8a:
50:f4:ca:13:33:3b:4e:de:a7:42:5e:90:c2:d6:63:
57:1d:76:05:b6:5f:9b:ae:d6:cf:e9:6a:ae:53:10:
1f:76:eb:76:0a:41:ac:62:c9:c0:cf:43:6a:51:50:
bb:90:fa:5c:07:ec:f3:7f:af:ff:5a:27:55:09:0c:
9b:42:59:8e:bf:d8:98:7f:dd:ad:1b:d7:9c:98:e6:
4b:24:6a:87:ca:4f:b0:5c:38:97:f0:cc:b7:ed:81:
ad:ea:60:59:3e:d1:14:55:a3:ab:e4:d3:df:b2:c6:
34:0f:2e:42:6d:28:87:24:d2:24:0c:77:a6:32:5b:
20:f2:50:36:70:92:d0:a1:0e:ef:78:e2:a2:c6:27:
75:b4:0b:5e:05:fa:aa:bc:cd:4a:ad:c1:e6:81:4d:
e9:a5:6f:28:d3:57:72:c2:92:be:45:a2:d2:09:20:
74:fb:17:c9:71:2e:c5:ab:ae:be:60:21:6f:bc:b3:
93:84:c5:3f:52:6d:35:64:66:ee:f0:a9:b1:f4:22:
8c:e4:00:2b:75:d1:31:43:d3:15:c4:b3:aa:49:19:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1D:90:3B:67:57:9D:5B:F5:38:22:AB:7D:19:BB:9B:AC:D2:6E:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ec1c2b-a91e-3160-8b63-27cdac59a9f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.199.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:58:d7:87:db:93:2b:4c:92:3f:6a:51:98:7d:f1:7c:04:91:
23:54:16:52:d0:10:59:e5:6a:1e:96:8e:cc:0b:db:60:7e:f2:
e3:ac:21:5f:c0:04:d2:df:68:09:4c:12:b4:1b:09:61:13:33:
54:47:c3:e4:b9:34:81:cc:ed:7a:a1:ec:cd:c8:28:6a:c5:64:
b7:4d:b1:5a:a1:ff:95:3c:6f:32:7c:35:7f:d2:0d:33:eb:14:
d8:29:0b:09:76:b9:e0:ec:22:12:0d:f0:9a:1c:dc:39:3c:3c:
5d:83:d6:13:1d:8a:07:8c:01:eb:14:18:81:67:ea:bf:27:e1:
03:47:0a:8c:82:0a:63:1f:ac:50:c8:d5:b0:31:51:0e:64:79:
06:4b:43:de:e3:e7:eb:85:6c:8a:46:71:5d:bc:1e:f1:68:9e:
38:21:44:6a:be:f7:f6:d3:1f:25:3b:9f:7a:51:2b:a7:65:a9:
8b:4e:37:ea:3f:cb:a4:31:de:7b:1f:e8:67:bc:b9:5b:85:ea:
61:5e:ce:9d:52:c7:28:c7:c0:55:28:51:1a:93:f6:dd:aa:c4:
fe:37:47:33:80:e6:f5:79:f3:c8:98:66:84:d7:b6:fd:cb:d0:
31:79:d0:5c:6d:8a:e1:3b:25:3c:43:ac:27:f5:ed:43:92:00:
bf:d4:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:59 2025 by rpki-client