Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb21062f-d6fa-3483-b12a-b59d46844060.roa
File: cb21062f-d6fa-3483-b12a-b59d46844060.roa (raw, json)
Hash identifier: 4ioHZvd+N1xk8elWnMXY2n/ro8+4MGUyN5o4GHlsNtE=
Subject key identifier: A2:4A:3B:7C:96:93:42:97:7C:0F:B3:D3:5D:8A:4A:E7:0E:21:1F:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1395FB78034F5B225E0A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb21062f-d6fa-3483-b12a-b59d46844060.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 71.198.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:95:fb:78:03:4f:5b:22:5e:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0a2d01a1-827b-43d0-bb1c-a32aef515a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:4e:42:f4:1a:3c:f1:53:29:4c:2d:cf:f0:
fc:ad:6e:36:f3:61:81:80:51:b2:d5:84:d9:9f:18:
89:f9:75:8a:6d:f9:db:5a:bb:17:1b:b6:f9:36:17:
ae:67:16:42:d4:31:08:65:c2:4f:ff:29:9b:d2:e3:
5e:80:f9:51:1e:3f:f0:b4:0f:10:67:6a:20:84:e5:
94:c1:55:07:50:26:b3:75:7b:cd:ed:11:03:90:f8:
9d:de:05:22:26:0c:fa:a1:3b:35:83:84:b5:02:b4:
e9:3a:cd:2b:93:b5:48:15:c3:7e:c6:e1:51:9d:cb:
39:10:98:fc:3e:77:41:5d:9f:c1:37:2f:4e:2b:b2:
f1:a8:8c:fd:3a:19:20:c0:5c:2e:b8:27:04:17:aa:
49:ac:a4:ee:6f:23:be:87:61:c3:f9:01:d5:11:b4:
76:a4:bf:c1:87:c4:d9:33:ba:e8:2d:1a:07:25:07:
db:5b:89:e3:0a:fc:c5:ef:c3:e9:e6:a4:06:dd:64:
fd:29:15:e3:d8:3e:07:c0:8b:bf:6e:f0:7e:ee:d1:
7d:b7:fa:e2:1b:12:19:5c:86:46:03:e4:0c:ba:04:
43:c6:3a:13:60:be:f3:b4:56:35:f5:fd:e4:4e:78:
11:6f:eb:f8:02:bf:5c:b5:10:0b:c0:d0:fd:9c:c9:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:3B:7C:96:93:42:97:7C:0F:B3:D3:5D:8A:4A:E7:0E:21:1F:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb21062f-d6fa-3483-b12a-b59d46844060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:07:cf:d2:11:62:85:a0:c8:88:3b:e4:b5:1d:b9:2f:cf:27:
4b:04:3f:ba:98:6b:69:16:6d:83:1d:7e:4f:7f:68:64:09:21:
bf:f2:7d:a1:35:43:57:57:76:d7:7b:43:50:09:b7:20:fb:7b:
40:c5:02:b7:5f:90:42:cd:b4:13:f8:8e:ed:50:e1:ec:18:e1:
04:87:66:30:2b:e4:1a:14:e6:31:08:9f:a0:68:77:8e:34:67:
f9:3f:65:d3:c7:89:0a:59:20:fb:ab:25:8c:d7:58:62:5f:f7:
d4:e1:22:b1:a5:ae:37:a7:3c:38:da:eb:26:90:bd:2b:77:60:
c8:cf:b3:c4:24:ef:49:d2:bb:4f:13:54:18:c8:3b:51:08:14:
da:6e:8d:5e:cc:b9:68:41:ed:7c:31:43:ea:82:4d:99:1a:eb:
e8:33:42:d4:95:4c:a8:bb:6b:4a:d8:f1:f3:0a:b6:62:22:f1:
73:97:36:3c:c8:5d:5f:e2:b1:d5:52:56:b9:d7:92:87:8b:b0:
25:6e:5d:dd:1e:e9:b6:a2:c6:83:9e:f5:c1:c4:d3:49:fb:3d:
96:da:68:b2:a2:ab:97:7c:20:95:9a:f3:de:c4:2c:ba:8d:32:
d0:95:1b:d5:9c:14:b9:fc:b1:53:b3:1f:5a:0e:05:35:29:ef:
87:d2:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:19 2025 by rpki-client