Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa
File: bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa (raw, json)
Hash identifier: ZHgdpakjcSfpwmC7B7+g1BVWkc2bXmrIJtAVq9fTd1Y=
Subject key identifier: 23:7C:30:55:BD:45:34:75:FC:00:3C:6B:1A:80:49:70:A7:31:0E:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127A4AB033FA091C5C8390
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.184.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7a:4a:b0:33:fa:09:1c:5c:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5537043f-12a3-4666-91e3-0426d72349e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:20:82:50:ef:78:b0:f1:b9:55:b5:a1:7a:
f0:cd:61:05:30:8d:97:fe:be:9f:90:12:61:5a:b0:
99:0a:11:d6:ac:15:a5:bd:d0:99:ac:0c:58:ff:e7:
a6:97:cf:0b:6a:d6:ae:8e:0a:82:8a:2c:d5:e0:21:
f6:13:73:b3:78:eb:03:ee:20:e7:27:61:61:d4:f9:
f0:5a:6d:49:8b:b2:91:d6:a7:44:1d:c7:36:09:b8:
9c:51:ea:4c:2d:34:35:d8:4e:f9:62:3e:1c:33:a7:
6e:4d:03:56:13:f7:b8:6f:56:d1:63:25:22:88:e6:
6d:2c:50:c5:20:c4:a1:28:10:af:52:03:ef:46:66:
16:1a:30:03:9e:54:eb:0d:48:48:07:ca:28:0b:36:
12:3b:31:5c:21:25:7c:3b:28:e4:0d:fb:f1:65:d5:
48:75:47:7b:c5:ee:a2:af:75:7e:58:d2:2f:e8:d9:
81:a0:c5:6e:99:d6:95:0f:7e:b4:07:9b:72:01:bf:
ff:72:28:f8:c2:8e:c9:f3:8c:3e:e0:b9:5b:3c:02:
ee:8d:54:44:0e:71:4e:7e:e6:69:01:ef:bb:f6:15:
79:11:33:5a:e9:a1:51:8d:13:d5:8d:87:1c:a7:16:
80:d4:aa:a5:df:3d:8d:aa:e4:a0:51:7d:27:ee:0d:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:30:55:BD:45:34:75:FC:00:3C:6B:1A:80:49:70:A7:31:0E:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.184.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:22:f4:9f:8f:5d:a9:0b:fa:88:3a:4e:05:d1:76:4c:f6:a5:
03:bd:96:0c:ea:55:d5:3d:a8:33:53:56:86:c3:56:ce:cd:cd:
58:c0:e6:82:49:26:d7:d1:41:cd:3a:94:aa:a2:4c:fc:86:22:
44:0b:e1:8c:57:4e:e6:54:92:ce:cd:3b:37:2f:8f:af:8d:89:
b1:da:50:2d:d7:1f:b3:9b:8d:c7:4f:18:2e:b5:25:8d:96:7d:
4a:32:a3:7e:24:e1:55:7d:df:88:3b:4e:44:da:c2:2e:1e:8b:
ab:75:6a:df:07:30:05:5b:b3:cc:5a:8d:b1:a1:26:1d:a7:4c:
36:49:59:52:12:3a:f7:61:af:46:93:a7:fb:4f:62:8c:bc:e9:
c2:a8:5b:61:e9:dc:22:80:d8:95:c3:cd:a5:1a:92:22:46:4a:
db:a0:2f:a0:23:3b:d9:80:fb:e4:16:a3:f4:12:88:58:2c:c0:
06:86:ea:a7:5a:44:40:a0:03:f9:7c:9a:f5:83:fa:a6:c1:95:
69:77:43:d0:88:53:1f:c3:7d:c8:93:aa:f2:fe:94:a2:cb:ed:
06:10:c6:ab:55:cb:a1:ea:63:6a:68:72:85:30:3f:ca:31:0a:
25:c6:09:51:41:43:e6:a7:21:f7:c9:7d:3f:c9:d0:c9:8e:20:
4e:51:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:06 2025 by rpki-client