Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af1c3b34-4bf8-3040-b98e-dcd048c7888f.roa
File: af1c3b34-4bf8-3040-b98e-dcd048c7888f.roa (raw, json)
Hash identifier: ZqDgnJ+cOHvLfLVkfvX9DePr9xmdR472OA1r3rsSRM4=
Subject key identifier: DE:5B:0D:61:F9:4E:F2:61:B3:28:11:98:CC:12:CC:CA:CF:61:8E:5F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123BD11E1E982C275A7180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af1c3b34-4bf8-3040-b98e-dcd048c7888f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.224.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3b:d1:1e:1e:98:2c:27:5a:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0ff56ecf-af0c-4383-86b5-3d30f924a222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:92:9a:a9:62:ef:b2:86:09:39:8d:c6:42:
b7:86:29:56:29:fd:71:2f:13:ac:51:b7:ae:90:db:
79:01:af:54:05:3a:c3:6d:7e:2c:21:d7:6e:b4:b5:
38:7f:45:e1:40:11:65:85:22:9c:77:6e:a8:9b:c9:
93:93:9f:e5:d7:98:78:91:80:a7:a5:15:b7:86:1c:
4a:c1:4b:95:41:28:4f:4b:22:76:da:dc:63:ea:b7:
fe:d7:51:db:54:e1:29:6e:52:f1:22:7d:88:05:89:
65:9f:70:76:8e:45:e0:06:31:c5:f8:58:93:4e:db:
5a:46:24:fc:e6:71:bc:8c:60:eb:3c:38:1f:69:3e:
c1:7a:a5:ed:61:c4:e0:f7:6b:e8:83:f2:1d:87:a3:
60:0a:6c:ef:59:38:00:39:bc:38:df:c5:f7:56:3e:
cc:ea:ac:ab:fc:aa:2a:a1:6a:24:7b:98:9b:e2:47:
5f:5e:41:bd:01:f8:d5:10:14:ee:cd:4b:68:1f:20:
d0:e6:8b:8b:56:84:72:40:e0:39:44:d5:85:cd:3a:
92:28:83:a0:a6:ad:6d:fb:5d:2e:1e:5d:6b:4b:c9:
a2:a7:c9:c8:2a:c8:62:35:e2:a4:67:32:f8:13:da:
bb:ff:43:0b:3f:d0:2c:1f:e7:a0:14:d7:de:6a:cd:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:0D:61:F9:4E:F2:61:B3:28:11:98:CC:12:CC:CA:CF:61:8E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af1c3b34-4bf8-3040-b98e-dcd048c7888f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:cf:e5:a3:87:e3:50:d6:cc:54:a9:67:ea:26:fb:fe:e3:c7:
e9:d1:0b:f6:fd:d0:c8:5c:10:8c:b9:bf:4d:dd:dd:26:a2:c7:
2c:03:52:8a:86:bb:39:2a:2b:82:77:8b:78:e0:ad:0c:aa:66:
83:28:ca:82:63:22:82:62:9d:e8:48:2d:aa:7a:45:be:df:b7:
d6:38:92:1c:1b:4c:35:96:8b:bb:7b:e0:f2:35:e4:cd:66:23:
c3:77:04:2a:af:80:71:27:3e:72:e2:74:84:33:e2:dd:98:21:
c7:4f:67:85:27:ad:b9:4e:bd:c0:e8:16:92:8d:a4:88:6d:9f:
2d:f4:90:91:11:c3:8d:f1:29:da:d9:6c:35:d9:49:a0:f9:2c:
28:49:eb:39:41:17:16:49:e2:0a:00:a0:3b:ce:67:6d:75:78:
97:e1:b7:0e:ec:ae:d4:5b:cd:af:54:37:8e:db:a1:03:3c:99:
6f:b7:82:9d:8e:6e:25:da:a1:5e:83:74:00:29:b0:9f:de:76:
20:16:d6:c7:47:d1:a3:a4:46:09:65:af:69:6f:d9:81:55:ec:
cb:32:ec:b9:8d:4c:35:9f:ec:de:57:97:56:7f:7a:8e:51:63:
23:1c:7e:b0:62:3b:bd:cd:13:04:be:5b:d7:44:44:07:2c:3b:
cf:01:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:37:51 2025 by rpki-client