Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8add4d7-252d-3eb0-8400-9e506d3b171a.roa
File: d8add4d7-252d-3eb0-8400-9e506d3b171a.roa (raw, json)
Hash identifier: enyG8gEbkeKX5r3Sja17O/Uus0m+9ot1+iu3pevQBVc=
Subject key identifier: 71:5A:06:56:0E:D7:10:7B:1A:FF:2C:DB:6D:BA:10:9D:8A:AF:19:A8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128E74117ADB554653D080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8add4d7-252d-3eb0-8400-9e506d3b171a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.201.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:8e:74:11:7a:db:55:46:53:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0982d95f-e9b8-43c6-9ce1-cd72e09bd68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:61:df:5c:26:88:23:06:cd:0f:a2:34:f5:
9f:29:bb:48:40:40:93:c1:04:f7:91:17:d1:27:b0:
a9:55:fe:e8:61:8e:3a:d8:70:94:05:9c:b4:2d:95:
8a:4a:a5:a7:89:f8:9b:6b:7c:f7:67:22:ab:f2:34:
a0:dc:9f:f6:34:b2:2d:68:e9:d5:d4:ce:05:1e:42:
1e:ca:dc:1f:f0:cf:a1:1b:63:64:e2:c0:58:e4:44:
be:9f:53:cf:da:ea:36:cc:99:ad:f9:38:89:89:16:
48:9d:18:9d:87:97:95:6b:f7:84:a3:d8:09:6d:e7:
42:77:f5:9a:c3:35:ef:10:75:66:2c:35:6b:49:8a:
9f:a4:c4:2c:21:40:2d:76:bd:72:20:86:76:aa:22:
dc:c1:e1:ab:08:ce:f0:c7:7d:cb:48:92:11:8d:a6:
ff:c5:b0:85:fe:1f:97:1b:44:a2:0d:6a:d8:1b:c1:
40:f5:6d:40:38:b0:09:db:25:ec:e0:8e:b8:15:a9:
47:bb:9b:ea:db:12:5c:35:47:f7:19:a3:e5:ad:ba:
28:1b:a3:fc:91:93:11:57:1f:f1:50:b1:20:2f:00:
a4:0c:f3:af:e9:ad:a6:1a:75:18:19:f8:9e:50:5b:
fd:af:83:23:e4:b0:60:96:b0:aa:bd:e2:29:c1:ae:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:06:56:0E:D7:10:7B:1A:FF:2C:DB:6D:BA:10:9D:8A:AF:19:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8add4d7-252d-3eb0-8400-9e506d3b171a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.201.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:54:65:71:38:e8:fb:b0:78:16:15:62:93:ef:1e:70:94:72:
85:06:a0:c6:0a:13:5a:e7:28:0e:97:ef:7c:0f:2d:07:74:b2:
e7:69:8b:05:e8:d1:e9:77:19:72:a5:67:c6:33:46:99:dd:91:
3c:1e:1c:bb:b5:a7:6b:ce:2c:d5:f5:da:fb:29:bb:9e:f6:80:
b7:9c:3c:76:8c:2d:d3:d2:9e:9b:a5:43:a1:d8:60:32:d3:28:
35:4e:63:2f:ef:81:42:30:1a:2b:a7:7e:d3:7a:dc:05:da:2e:
64:04:00:94:e2:ff:90:17:fc:3d:56:a7:4d:09:db:a3:fb:28:
e1:fd:a9:50:8f:2b:4c:fd:15:bd:d1:8c:f6:59:14:ff:b2:3d:
95:ab:f5:19:ff:89:ad:fc:7d:71:d9:d1:96:d9:c8:23:79:5c:
b5:49:5e:8d:dd:f3:f7:09:34:d7:1e:6b:da:2f:2d:5f:d8:85:
e3:e9:52:47:83:d0:30:d2:ad:88:66:b7:86:62:94:c1:01:55:
cb:1e:cf:5a:bf:22:d0:55:5d:65:6b:93:2b:06:bb:6a:2d:f8:
31:ac:cd:66:13:10:24:60:23:32:97:aa:37:78:ab:89:49:d1:
55:7e:72:f1:2f:dc:63:a7:e9:5a:0e:ff:c2:ba:9e:30:06:b1:
16:ec:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:29:07 2025 by rpki-client