Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b51433c3-e4ec-3ec8-a02c-8ed2709b1afc.roa
File: b51433c3-e4ec-3ec8-a02c-8ed2709b1afc.roa (raw, json)
Hash identifier: DBfMaU4bt1eDuKVg6nomtZr5+A07BcZDRuTcioXiEzY=
Subject key identifier: B3:53:C4:BF:1F:18:19:87:84:D5:DD:53:D1:98:A6:DA:80:7E:45:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C121E6520804C155D41ABE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b51433c3-e4ec-3ec8-a02c-8ed2709b1afc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 174.166.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:1e:65:20:80:4c:15:5d:41:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7b41308b-da5c-405c-a7b4-85dab070fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:02:4d:64:2a:ea:b0:92:44:bc:81:a5:60:
00:25:9d:c8:7f:28:c7:6b:38:93:a9:3c:40:e8:cb:
00:e4:ab:e4:a9:1d:40:c3:94:e6:35:f7:b9:24:4d:
6b:7f:57:8d:69:6a:fd:2e:84:c1:80:16:af:96:2a:
3b:0e:1a:10:86:14:92:14:33:1b:58:ab:b9:f8:f3:
a1:07:7f:37:b3:78:ba:27:68:bd:02:0f:41:19:2f:
a3:98:85:a4:7a:e7:22:fc:25:de:aa:76:24:5e:f5:
c1:a8:5b:3b:ad:f5:8a:29:9c:2f:00:c1:75:e2:91:
75:c6:b5:db:05:8a:4b:f9:36:c3:84:01:d0:73:bc:
bf:dd:85:b4:20:74:61:66:c5:50:4f:57:2d:8f:99:
e4:e5:ea:3d:2c:07:fa:9b:cf:91:cb:9b:c7:af:1e:
38:f6:f5:2d:cb:f2:db:60:37:73:00:d4:92:14:8b:
0c:8b:05:20:9a:d8:00:66:7d:13:b4:48:fc:2b:10:
18:47:52:99:84:98:6c:b7:f0:a2:45:d3:58:8f:55:
14:f6:29:a6:3f:1a:55:e4:82:0e:2b:4a:49:0a:50:
d0:73:89:65:78:14:fa:c7:bc:b7:9e:83:2b:c7:98:
49:36:e8:a1:70:ab:94:44:88:f8:01:00:57:4c:f8:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:C4:BF:1F:18:19:87:84:D5:DD:53:D1:98:A6:DA:80:7E:45:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b51433c3-e4ec-3ec8-a02c-8ed2709b1afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.166.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:03:5b:f3:d0:ac:bc:83:fc:cd:00:a5:23:b3:46:82:db:db:
cb:ce:a5:b8:e0:7c:b3:f2:8e:f1:e9:54:2b:27:21:4a:19:16:
23:f6:c1:8f:be:ad:65:27:8b:40:bb:a3:b9:9b:2f:d1:b9:71:
df:b9:19:4d:3b:c9:b3:6a:05:cf:c1:10:df:34:67:05:1b:57:
a2:d2:6b:48:5f:ee:c4:b8:1e:13:bf:66:de:18:4e:70:b6:44:
59:15:8e:02:5c:70:ab:85:68:d8:1e:9c:2d:d5:c6:5a:00:c9:
48:74:1a:9c:50:f5:11:7e:d1:f8:1a:de:27:e9:5b:0f:5a:ef:
33:13:de:80:7e:f0:2e:c5:19:f0:13:67:f2:be:7d:86:62:33:
05:95:23:4f:f7:3f:c8:d4:7c:49:48:c1:98:33:32:60:67:f9:
da:26:68:b3:50:40:3e:cd:4e:79:57:c7:2e:3d:03:a1:92:98:
80:62:ef:12:da:f9:b2:0e:87:fd:49:83:2c:87:38:60:cd:f4:
53:32:29:2f:75:07:a0:c5:3e:78:ed:d2:9a:55:6e:7e:9e:7f:
cf:7b:b5:ff:bb:b8:69:5e:70:ea:9f:00:e1:28:cb:93:23:ec:
b5:c1:17:d5:31:93:3c:13:62:42:32:17:0a:82:96:a4:8d:36:
f9:8e:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:09 2025 by rpki-client