Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf985993-a9be-3e38-8310-3d60be65811a.roa
File: bf985993-a9be-3e38-8310-3d60be65811a.roa (raw, json)
Hash identifier: XHyS5uw8XeXF4U+u/UF8/Am51iLs+y6WN5F2vqk7lWI=
Subject key identifier: 71:2E:A0:70:98:93:61:69:4C:ED:01:65:76:AA:CE:19:22:47:CE:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A907E8380C59B29938380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf985993-a9be-3e38-8310-3d60be65811a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.169.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:90:7e:83:80:c5:9b:29:93:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b769f9f7-e821-49dd-ae65-562ab144d8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:4c:4a:ea:39:50:4d:b4:ca:49:f0:a1:4c:
9d:e3:0c:24:de:8e:3b:dc:44:4d:54:ee:ba:dc:40:
0b:9f:d9:46:61:be:19:fb:58:cb:09:d6:38:89:c8:
83:94:c3:9e:47:38:e3:f6:1e:5e:95:73:0c:e0:5b:
6a:8e:a5:19:7f:35:f9:4a:13:30:d6:96:1a:85:ac:
03:2f:c9:2e:fc:93:ed:0e:7e:64:ba:d2:fa:06:8a:
e7:44:90:aa:58:67:2d:d9:9f:b1:d0:25:8b:9e:9e:
c4:9c:bc:fc:65:ce:c8:77:40:63:e4:61:a7:7f:6c:
c3:09:ac:e7:14:5b:92:34:7b:f0:2c:15:1b:ec:88:
0a:b3:f6:e6:39:7a:3b:1b:69:73:2b:c7:83:75:b6:
fb:fd:fe:24:cb:2b:c0:48:e5:b1:59:1d:15:80:51:
6d:08:7e:66:49:17:d2:37:af:4b:79:95:d8:b1:98:
af:83:64:ff:2e:ab:55:e4:66:91:f1:a9:e3:75:dc:
22:2c:68:2d:51:53:cb:55:fc:0b:c5:3a:18:3f:92:
f4:9f:e1:d6:1a:4c:93:04:7b:4f:a9:f8:cc:e4:91:
b1:50:66:46:1b:9d:e9:e6:5a:53:fc:0f:76:10:44:
95:0d:4e:c9:30:ce:0f:0c:71:73:f0:3f:b2:f9:7f:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:A0:70:98:93:61:69:4C:ED:01:65:76:AA:CE:19:22:47:CE:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf985993-a9be-3e38-8310-3d60be65811a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.169.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b0:43:96:ad:11:32:58:f9:5e:97:4d:1a:84:41:1b:04:d6:
74:2d:df:1f:c0:51:af:ef:4e:00:c8:ee:7c:7b:cc:8c:85:4d:
0f:e2:4a:1a:f5:0f:b3:05:0d:b8:1d:08:3a:9a:a1:06:be:0b:
e7:79:27:83:6c:18:46:ca:a0:70:65:25:3a:21:43:b5:29:ba:
c5:e7:10:5a:0a:ec:44:d8:96:fb:6c:f9:c5:3c:1e:9d:bf:5e:
a6:63:74:01:88:6e:70:91:de:92:6e:44:9f:31:ab:eb:e2:69:
47:e3:d0:50:9b:95:a4:41:ad:01:42:0f:a0:bc:82:3d:1e:86:
97:6b:0a:a1:a4:95:50:0b:f0:06:d5:d3:60:e6:ce:3d:f7:69:
7c:7b:c7:b0:96:33:59:74:86:c0:45:28:5a:c4:ad:4c:dd:c6:
8b:28:96:a6:73:e6:a0:45:31:9a:00:f1:36:ca:7e:6e:6b:a6:
97:d5:7e:88:76:3f:10:57:15:96:cf:ed:1c:81:cd:1a:61:1f:
f7:d0:47:c5:d4:40:e0:96:05:ac:a9:4e:ea:76:0a:95:bd:2d:
cd:20:12:bb:be:cc:06:d1:02:66:5f:a0:ef:fc:41:07:77:2a:
c3:d3:dc:bf:f2:55:36:6e:14:6e:fc:d3:e2:d4:32:6f:e8:47:
21:93:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:06 2025 by rpki-client