Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea2286b0-58e8-3cb5-9dc4-d99684699cc2.roa
File: ea2286b0-58e8-3cb5-9dc4-d99684699cc2.roa (raw, json)
Hash identifier: F/zNPtQohQmTlwCrBz/w6QtayN+MpYQn+3EShk/F2yo=
Subject key identifier: E4:23:7C:34:E9:78:05:4B:44:56:5C:11:C4:C6:7E:C1:F1:34:D4:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123F1A77A09EB81FD12F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea2286b0-58e8-3cb5-9dc4-d99684699cc2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.230.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3f:1a:77:a0:9e:b8:1f:d1:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7511f417-f8a8-4309-9c10-817253249d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:b1:54:b9:20:07:9e:97:67:4d:00:0a:27:
46:01:53:d0:6e:48:11:d4:bd:31:07:78:af:ac:00:
92:81:c9:3d:a8:d3:b1:65:6b:00:4a:fb:fa:d2:00:
19:a6:f0:77:fd:f3:61:34:fe:b9:c8:c1:f9:e1:f2:
1d:d1:5e:bc:8e:f0:ae:b5:2d:06:ba:2b:c8:59:75:
a6:5a:ce:f7:30:b6:c8:bf:b7:ac:87:69:02:6d:ad:
89:da:dc:8f:c2:26:27:4d:f2:93:2b:a0:eb:fa:60:
d9:39:ac:7e:a7:c1:a6:8c:65:f4:0c:63:47:c2:d7:
f7:ec:26:c2:98:f8:d8:10:05:bb:c5:ce:04:6b:cc:
67:8c:03:37:49:6b:bb:84:57:d5:46:fa:c8:27:86:
eb:ee:fa:c6:03:b6:73:9a:22:21:7b:3a:7d:a3:d5:
dc:50:56:1b:c1:46:d2:45:df:68:e2:3c:9f:05:19:
3b:d7:98:54:d9:14:04:00:86:98:40:03:1d:b3:b1:
60:1c:46:61:e1:83:a1:f1:ba:23:8d:b5:f9:a9:76:
c9:84:92:28:f1:2f:38:01:0c:ff:96:bb:4a:c4:ad:
24:14:0b:c8:05:78:20:34:4a:b9:c2:97:a8:31:31:
f3:6a:c5:fe:18:cd:33:27:f3:73:a1:32:ab:03:7b:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:7C:34:E9:78:05:4B:44:56:5C:11:C4:C6:7E:C1:F1:34:D4:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea2286b0-58e8-3cb5-9dc4-d99684699cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:1b:af:24:17:94:6a:f4:24:12:41:49:9b:fc:ff:b8:ac:88:
33:42:c3:5f:e9:57:96:f5:dc:65:a8:5a:8d:c9:79:de:72:0b:
56:12:6e:6d:e9:05:30:77:76:c6:ff:56:a7:64:53:92:0d:4f:
22:40:e2:90:c7:9d:91:12:11:9b:aa:09:9b:a5:97:ea:e7:68:
3f:62:b1:92:93:0a:49:9a:3e:58:7c:37:57:0d:0a:f2:0d:f2:
47:36:1e:64:68:7d:d0:c2:84:fe:2d:b6:df:30:a3:24:7d:b9:
56:f0:fb:92:80:cc:fe:be:b2:53:42:69:17:aa:bc:48:38:59:
ae:20:f9:15:14:95:c1:b6:dc:e7:20:df:ba:9b:aa:0e:8e:18:
a4:d2:07:ed:de:67:ec:39:24:b9:7c:a5:e6:b1:98:d9:ed:ea:
92:fc:78:ea:4a:e7:de:ea:f0:cd:99:57:bc:ec:46:08:49:f9:
d0:9e:8e:bb:a9:f0:c4:93:68:71:32:42:a4:33:8b:f0:e1:f2:
2e:ec:e0:9d:9a:85:94:c0:13:7e:e4:f4:38:09:bc:db:f3:51:
9c:c7:28:07:65:f0:9a:86:89:4a:4c:05:7c:20:7d:a1:00:7c:
1b:21:f3:b8:fb:15:19:ba:4f:b0:91:c2:ca:a8:16:61:ea:79:
80:45:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:29 2025 by rpki-client