Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad4fb3af-b953-3cd7-9a40-d94589ca49b3.roa
File: ad4fb3af-b953-3cd7-9a40-d94589ca49b3.roa (raw, json)
Hash identifier: alkpv8JnUueyuWcSeJyifjl7CxaAwqehfRMsvAyPJeY=
Subject key identifier: BA:46:4A:05:8D:FB:56:28:C5:A9:4A:F1:31:F1:9F:F2:7E:80:9A:F1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AE249AC58D4ADAF72B2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad4fb3af-b953-3cd7-9a40-d94589ca49b3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.233.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:e2:49:ac:58:d4:ad:af:72:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=03b16bb0-ea6d-4fc6-a852-a7cfcd84cca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:3b:e2:cb:b7:aa:35:be:41:94:f0:17:56:
77:4c:ad:54:ed:a5:49:66:a2:89:5c:a6:ff:cb:63:
b1:71:2d:32:66:20:95:fb:cd:8f:e1:42:c0:65:da:
ad:fc:69:2e:8a:53:07:1b:b8:b5:1e:2f:f5:29:4d:
64:c0:ab:1c:21:e6:17:e9:50:73:b1:84:80:7e:58:
8c:df:96:fb:f9:18:8b:74:66:fe:d4:02:3d:33:88:
e4:d8:e2:d3:8d:32:ce:41:83:97:28:55:91:a0:2e:
ba:18:a4:55:ca:be:bd:6c:f4:e0:d2:64:7a:b0:9a:
a3:14:f5:23:7f:52:00:e9:0b:89:88:d9:1b:70:47:
e5:74:4e:b2:cc:13:0d:86:17:64:44:98:df:24:ad:
3e:36:ac:05:ea:6f:12:d9:5f:42:2b:26:4a:a4:df:
63:a8:d8:66:e1:e3:97:e0:38:f8:cc:dc:88:35:3c:
73:f2:07:27:87:78:d6:78:74:23:55:93:1f:66:5a:
e4:b7:5e:e3:ef:ce:20:04:f9:10:30:b7:90:e7:fb:
d3:1c:02:6d:ce:d4:09:07:79:31:b4:16:d7:be:f2:
c2:39:6c:c4:e6:63:29:5e:0a:04:db:05:71:f1:7d:
bf:8d:5c:9e:2c:02:5b:89:f8:f8:ac:64:84:24:48:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:4A:05:8D:FB:56:28:C5:A9:4A:F1:31:F1:9F:F2:7E:80:9A:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad4fb3af-b953-3cd7-9a40-d94589ca49b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.233.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:cc:9f:bc:80:8c:1e:de:01:b3:0a:a4:79:99:1c:c3:2d:a6:
29:96:ea:13:fe:41:6f:2f:19:6d:3d:d4:6a:5d:09:03:48:28:
8f:4d:d9:c2:a4:15:0f:8d:46:f4:3a:0e:48:5c:e1:30:15:8a:
dd:a6:1c:7c:75:72:a5:7a:f9:f0:66:64:7a:d2:bb:51:e7:e9:
81:1a:a8:2d:29:45:79:c7:df:61:f8:03:8b:df:86:70:e7:32:
fb:95:3b:ee:37:e1:eb:00:49:ef:61:ef:e2:56:d1:36:54:9b:
ea:87:b6:0b:58:3c:45:a4:0e:80:c2:1f:c6:8a:3e:ef:75:32:
43:d0:1a:6b:7c:2d:84:e2:81:34:76:a3:5f:e2:d3:36:39:cf:
76:94:60:e3:3f:98:d4:30:8d:78:ef:46:1e:37:d6:b2:07:48:
be:86:c7:63:8b:e5:92:c3:a2:93:39:9d:0f:58:9e:b1:b1:2d:
a6:9f:bc:33:0f:1a:83:57:39:f9:43:73:2a:99:6a:a2:2d:0d:
9c:8e:aa:d5:94:53:98:3c:db:20:d6:d5:1d:11:cc:7e:f5:09:
51:22:f7:16:60:e4:2a:11:b7:b9:80:92:17:b1:1d:17:a8:a4:
59:26:70:66:04:04:60:24:d1:e8:e9:a9:06:d7:9d:a8:9f:cf:
8a:a7:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:21 2025 by rpki-client