Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e33c4378-c984-35a7-8608-1a8bc4c4f1e7.roa
File: e33c4378-c984-35a7-8608-1a8bc4c4f1e7.roa (raw, json)
Hash identifier: SxmkYG4OAqSW3UL8YuT1ECWoT3XrLIutpD5VSk6/xGQ=
Subject key identifier: DA:2E:69:58:60:5F:DB:21:28:10:58:06:AD:E2:CB:03:5E:4A:31:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1276183F51BD1EFF0CF670
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e33c4378-c984-35a7-8608-1a8bc4c4f1e7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.173.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:76:18:3f:51:bd:1e:ff:0c:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=28413f21-e07a-4c88-8ebd-d456d0b777a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:05:7f:49:69:fd:42:2f:61:e4:8a:92:c1:
b7:02:19:f3:4b:79:f8:a0:d4:fa:11:e1:47:33:48:
1b:92:ca:2a:db:e4:5f:31:7a:7f:b1:16:47:10:18:
c0:69:e7:6e:36:a2:f0:3a:9e:c2:cb:72:a2:ea:1f:
6f:92:33:98:d0:e7:cd:1e:f8:a4:db:e0:b6:23:00:
6f:14:0a:75:77:8c:53:f4:ea:7d:75:39:fa:23:1e:
bd:55:e5:f0:91:bc:01:50:2a:3d:95:9a:bc:4e:c9:
df:02:48:2b:a8:a2:ce:fc:c6:10:70:f5:32:71:9b:
20:65:ee:a7:70:07:a6:44:e9:42:c5:e4:d5:a7:49:
32:f9:51:6a:c5:ad:b9:e3:d0:87:51:40:89:e3:dc:
7b:3b:2a:34:d7:01:16:ee:7c:9b:d0:d8:95:73:ba:
4b:a7:00:b2:61:7e:52:36:3f:31:d9:fb:ef:9b:2f:
e2:2b:c9:08:7e:5b:a5:52:61:87:21:c9:5c:f5:10:
3b:77:5b:07:c7:02:6c:f7:a2:75:ab:23:98:38:43:
1a:89:8b:17:1c:ee:78:f9:a0:86:07:78:84:2f:a1:
e4:d5:92:fb:65:82:62:a0:88:f0:42:57:23:55:c6:
38:45:3d:8b:40:f7:5f:0b:da:08:de:f4:fd:5e:d0:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:69:58:60:5F:DB:21:28:10:58:06:AD:E2:CB:03:5E:4A:31:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e33c4378-c984-35a7-8608-1a8bc4c4f1e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:fc:78:d6:2f:28:35:5b:1f:65:e0:86:b1:87:0a:f1:03:05:
d6:6b:f3:17:69:9e:f3:57:29:be:e8:fa:4e:e2:59:c2:40:8f:
64:fb:14:b8:9e:f8:04:9e:64:25:a7:ef:29:e9:36:90:14:a2:
d6:8b:2e:4f:df:d9:fc:fb:a2:37:0d:a5:f5:05:a4:5f:d7:2a:
9c:49:4c:73:4f:46:be:ae:1f:81:4c:d5:01:81:45:af:bb:61:
07:36:2e:fb:a2:7d:d3:68:34:04:86:64:01:44:99:62:d0:8f:
9d:63:f3:d1:b3:8e:6e:26:9f:e3:22:19:41:a8:2d:f7:b0:8f:
d6:1c:00:f5:9c:b3:f8:2b:c2:40:12:5f:57:64:f1:40:cb:6b:
6c:7c:67:0e:1f:23:e5:b8:bc:c6:9d:6f:75:cf:d0:71:10:03:
62:b1:93:af:bc:57:e5:80:05:af:6e:65:54:56:dd:e1:d6:9c:
20:ea:e0:24:58:bf:e9:9c:82:cd:db:f9:bd:c0:e8:06:72:23:
3d:2c:9b:8e:cf:cd:60:12:e3:3f:a5:69:2c:a4:28:5a:e3:ed:
36:bb:ab:03:c4:0b:5d:d0:ce:78:af:06:6c:0a:3e:48:3a:62:
c2:a2:4f:d8:d7:3e:4e:27:8d:2f:76:b8:ec:a1:b0:d3:09:25:
c5:4d:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:21 2025 by rpki-client