Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e048b11e-87aa-377c-b9e2-2b1c7a8fb725.roa
File: e048b11e-87aa-377c-b9e2-2b1c7a8fb725.roa (raw, json)
Hash identifier: 5Vhq0RvnbxO4lx1XcMXeFKi3wtyF+dOPfMkhSNC/1zE=
Subject key identifier: F7:17:05:DD:4F:83:A3:06:C3:98:BC:DF:99:D7:0F:DA:5C:8D:C3:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C121DC7F235C49AA68E7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e048b11e-87aa-377c-b9e2-2b1c7a8fb725.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 174.166.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:1d:c7:f2:35:c4:9a:a6:8e:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=19bbf583-735e-4c46-862f-732558340989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:81:43:8e:8f:ce:00:e8:6c:88:22:d1:5b:
b6:e7:63:89:50:e4:66:5c:5b:f7:16:bc:d9:62:eb:
b9:14:df:c6:62:ac:6d:3b:b6:19:b8:99:66:fb:09:
e5:10:1a:98:4b:c8:c7:aa:c8:3e:51:c6:b4:90:a3:
5c:d6:bb:28:37:ed:a2:a2:87:1e:f0:3a:0b:95:e5:
d0:d8:ad:66:26:6f:d8:38:0b:ed:2d:97:b4:c1:c9:
e6:4e:98:3e:b4:74:84:6a:32:ef:d2:53:31:b7:08:
c1:cc:35:d6:00:2c:cb:28:70:00:15:84:dd:0b:59:
44:4f:55:b3:60:0e:c9:fb:8f:78:0d:af:0a:f0:b9:
5a:1e:6c:62:50:81:64:67:9a:8d:cc:cb:e3:f5:c0:
59:fd:79:4c:78:ba:bc:e9:06:c8:84:4c:7c:69:d0:
38:f0:d6:90:88:72:20:89:8f:31:3c:d5:69:5d:bf:
4c:d9:ad:2f:30:78:64:ad:ab:f0:1e:36:00:ec:69:
0e:8e:d0:1c:a4:c0:5c:57:3a:da:d5:ad:f1:ee:85:
9b:52:ad:5b:b0:39:3e:fd:d1:5d:00:d4:b7:f7:ff:
06:34:c2:1f:c8:db:bd:e3:52:7c:e9:5c:68:69:30:
8b:a0:b5:4e:b2:27:ff:21:88:cf:37:14:5f:b7:ee:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:05:DD:4F:83:A3:06:C3:98:BC:DF:99:D7:0F:DA:5C:8D:C3:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e048b11e-87aa-377c-b9e2-2b1c7a8fb725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.166.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:8e:f2:f8:e5:ae:de:29:fe:9a:b4:37:41:a0:24:dc:e0:34:
e3:4b:0a:34:cb:10:03:1c:e5:89:12:2d:97:cc:30:39:fe:80:
f7:19:63:ac:e9:37:fd:79:56:fe:6f:71:8f:3c:31:38:b8:72:
56:f9:96:b9:05:54:72:e3:2c:8d:a7:a4:2b:3b:66:c9:56:ff:
9e:58:06:ef:7b:c7:09:36:7e:4b:2c:8e:d6:78:c7:55:a1:ed:
58:68:17:dd:f4:38:30:69:f7:f3:74:7d:7a:e2:83:52:66:d8:
29:a4:5b:33:9a:ae:4b:a9:e5:52:68:49:6b:5c:1d:d1:e7:dd:
fe:f4:70:de:9d:b1:15:7c:6b:42:16:2f:93:a8:71:3e:99:5e:
5e:d1:dd:63:8d:a9:93:2a:dc:40:78:b4:ed:57:af:ef:7c:06:
99:d0:d3:ae:81:b4:bb:55:ad:fb:e3:05:0d:69:b8:e7:08:bb:
e9:8f:48:9f:7a:d0:03:a2:b8:37:29:06:5f:1e:7e:44:e7:40:
08:e8:bd:51:59:af:13:21:26:9e:7c:1b:e6:5b:cb:4c:c6:3d:
47:91:9f:2d:1d:bf:50:5f:d1:30:0f:77:c4:05:60:55:1f:71:
d9:00:ed:90:4a:c8:f0:37:bd:61:fb:fa:15:32:7c:fb:b2:0c:
59:6c:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:23 2025 by rpki-client