
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aef8ca8c-203d-33ab-96c5-0f9909c80dc7.roa
File: aef8ca8c-203d-33ab-96c5-0f9909c80dc7.roa (raw, json)
Hash identifier: iCpGb2QXzq+HraKPv7IP78z2WYtj1iOX767ut6g7+ek=
Subject key identifier: 97:6B:D5:15:FD:7C:52:B3:8F:8B:CF:A6:A5:C8:E1:B4:36:17:59:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B88F3C77A9F63487F2000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aef8ca8c-203d-33ab-96c5-0f9909c80dc7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 174.170.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:88:f3:c7:7a:9f:63:48:7f:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1f82b2cf-4b1a-4bd0-86dd-ef85cc8cdbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:b2:a9:e8:45:88:82:b7:09:46:6c:f2:5b:
df:8b:03:2b:76:34:bf:a6:d2:6b:6f:98:10:96:96:
25:a5:67:45:d8:16:41:6c:9b:ca:da:55:a2:25:47:
fb:ee:04:3d:b6:af:cd:a8:d6:95:69:3b:e2:e5:62:
3d:11:b8:1f:ea:f2:04:b0:a4:f5:b2:20:cd:af:ed:
c3:c5:d9:a7:1c:39:6c:0c:b2:64:4b:98:d0:d1:ee:
58:04:96:47:1f:0f:39:d8:1c:cd:91:33:26:f8:ad:
a1:84:d7:a8:14:98:21:91:2a:7d:f3:58:46:be:3e:
c3:89:c8:05:3b:9f:e7:9d:a3:2b:3e:fa:f9:0d:28:
d7:b3:7f:35:b8:8c:c4:7c:31:00:f7:22:dc:36:c9:
df:7b:4b:40:e9:6e:27:57:46:3d:fa:3c:df:e6:7d:
4f:28:38:e5:5f:9c:77:d5:94:bd:da:d7:b8:d1:0b:
b7:e4:b8:09:db:41:29:9f:82:54:e2:6b:1b:b8:54:
45:d6:e0:a7:66:60:48:c6:49:ba:58:d5:2d:ec:01:
22:14:ab:d6:b5:71:7f:49:30:69:09:23:c5:f8:7a:
74:c5:4c:e6:53:92:01:97:b4:c9:cd:5e:f8:6a:26:
8f:4e:62:6d:f4:2a:67:77:a8:b3:dc:07:e6:f3:24:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:D5:15:FD:7C:52:B3:8F:8B:CF:A6:A5:C8:E1:B4:36:17:59:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aef8ca8c-203d-33ab-96c5-0f9909c80dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:0b:b7:70:ff:39:77:5e:b2:f8:aa:2a:ed:bc:1b:1c:e2:6d:
12:72:f4:3b:58:1a:74:df:81:ac:58:01:ff:f4:23:06:a0:cb:
91:04:ff:f9:67:99:0e:df:3b:8f:1f:45:a3:a4:ee:d2:92:0c:
d6:b4:15:35:b6:a2:29:63:dd:8c:ea:ac:49:8a:4f:38:97:2b:
be:91:46:2b:71:85:b1:22:69:76:b7:db:7a:38:a4:4f:fd:4a:
d0:5f:eb:6d:2e:2f:6d:56:83:d5:ce:6f:23:48:d1:cf:5c:12:
da:f5:c1:18:8f:91:9a:d8:0c:6f:66:61:d9:af:5c:8d:77:be:
17:09:de:49:84:1e:42:7c:51:1c:3c:c7:8d:d5:af:20:f0:26:
3e:8d:33:d0:3c:bf:46:bb:23:3c:7d:ac:07:32:7c:ad:b1:27:
a7:60:b2:6d:45:22:3c:68:12:53:10:89:d9:5d:84:4c:72:e3:
b9:59:38:c5:4e:89:9d:7a:52:41:9c:98:cc:b8:a7:19:67:4e:
3c:89:c6:c9:12:43:59:ea:7a:12:58:4e:42:1f:82:7d:a3:3c:
2e:71:ef:f5:45:3e:51:b5:12:96:81:0e:21:0f:9c:7e:5e:c8:
fb:97:24:e6:c1:09:4e:28:59:9a:df:98:13:99:3c:33:da:b7:
44:d6:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:40 2025 by rpki-client