Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af86b5c2-7899-36b5-a9c1-c71308f7144f.roa
File: af86b5c2-7899-36b5-a9c1-c71308f7144f.roa (raw, json)
Hash identifier: YzOtRFupE7J3fHS7feeZpuPI/WExq0oEc0p/IUlUBDs=
Subject key identifier: 40:6A:90:83:4C:D4:48:33:EE:48:0D:A0:F3:7F:1B:1F:D0:90:48:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E5B2D55610E9FFB8A76600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af86b5c2-7899-36b5-a9c1-c71308f7144f.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 69.248.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:b2:d5:56:10:e9:ff:b8:a7:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=5fd659fd-ce64-4735-a6d1-dcf365ee4a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ba:f8:47:ed:ac:d8:67:f2:ad:e1:c2:af:f4:
a2:48:01:10:21:e4:d6:2c:fe:7d:77:fa:1d:6f:d4:
1d:1d:9e:db:5d:e0:cf:04:fc:18:53:f8:4f:f3:84:
3d:b2:45:1f:d3:72:1b:f8:2a:69:6d:f7:73:34:db:
c2:09:be:c7:b8:9b:54:14:cf:0f:da:86:94:a8:38:
3c:de:46:c8:4c:a7:4e:83:c6:1b:a4:ac:64:a9:9f:
08:00:2f:b9:dd:97:f1:21:78:64:12:37:18:a0:20:
2c:85:db:75:c5:53:0a:ed:75:ea:15:36:26:3e:e0:
19:db:66:16:ac:27:39:91:c9:33:eb:2f:a4:9d:6a:
0c:f9:19:92:48:e3:4c:ce:55:26:20:23:93:f9:51:
3b:b6:14:45:4b:56:cd:0f:73:8f:13:30:23:d1:72:
47:57:f6:4a:95:0b:33:59:bf:05:93:b8:3e:b5:d0:
f4:54:61:20:bb:60:c7:14:a4:f9:be:47:8e:df:1e:
7f:8f:18:e9:cd:9c:cc:31:a4:19:f5:42:e0:6c:08:
f9:6a:73:96:9e:52:ac:e0:71:cd:8b:d9:37:d2:f2:
be:84:b5:9b:ec:07:f8:30:66:ee:14:8b:77:e1:1a:
93:96:ea:4b:fe:09:47:e8:50:f3:27:42:d5:9c:9d:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6A:90:83:4C:D4:48:33:EE:48:0D:A0:F3:7F:1B:1F:D0:90:48:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af86b5c2-7899-36b5-a9c1-c71308f7144f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.248.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:4a:2d:68:40:15:87:86:a2:80:6d:de:fa:ba:51:5e:dc:c9:
a9:8b:cb:55:99:80:b0:f7:28:fc:92:ca:a4:58:2e:42:0e:4f:
6a:3d:98:b8:91:9f:57:57:02:55:96:68:8a:04:66:1e:e0:94:
75:5f:9e:40:fc:62:98:10:e1:d4:5a:04:5d:d1:73:dc:67:8c:
ad:72:5b:c1:01:f8:b2:df:ae:37:35:92:6e:d9:9c:e9:11:37:
06:2f:c8:a9:19:a4:68:c5:49:96:b1:88:05:1f:c1:cb:41:29:
06:84:ac:1d:d7:c6:a7:80:87:cf:e9:f1:b3:a9:b6:4f:11:a4:
18:9c:4f:e8:2a:05:5c:ea:0b:ad:d5:c3:89:fa:2b:05:94:43:
03:7a:b4:b3:f6:9b:4a:09:d7:30:47:41:a4:b6:80:b5:ea:f9:
d7:e7:ac:d3:37:28:e1:85:e4:d3:15:ac:56:b9:93:53:e0:c9:
ae:6e:b8:b9:27:f6:5a:f1:e6:7e:e4:5e:6b:ea:33:0a:9e:e2:
c7:b2:4b:14:ab:a8:d1:57:57:7a:ad:82:3e:63:d2:1e:b1:1e:
db:9d:21:29:61:2f:94:ad:52:73:8d:c9:af:d8:45:55:e5:32:
80:55:80:63:ac:77:bb:77:94:56:c3:cf:2c:53:36:ec:4c:a8:
26:14:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:02:53 2025 by rpki-client