Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/edf0c11b-6e69-3f15-a940-e61cdf1c47f3.roa
File: edf0c11b-6e69-3f15-a940-e61cdf1c47f3.roa (raw, json)
Hash identifier: +DzoRVCmu4V6wEHokRZiAOuKlaiR9CQ5HsiMiUlYtlI=
Subject key identifier: CB:E4:8C:42:DD:AB:3A:EC:1D:DB:E5:72:FC:CD:DA:7A:51:26:35:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D1132A3C6D25155A36C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/edf0c11b-6e69-3f15-a940-e61cdf1c47f3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.163.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d1:13:2a:3c:6d:25:15:5a:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c16d9f02-e403-4c2a-8d4b-28c367fa6cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:a1:87:37:a0:f2:ef:19:34:6e:17:fa:55:
27:33:f4:dd:4b:47:c8:c5:37:fb:6b:57:a0:c6:b6:
9c:81:b5:4f:ee:9e:1c:c1:48:0f:9f:bf:c7:87:9b:
fb:57:7a:51:06:ba:87:e0:bd:f1:97:bc:1d:1b:bf:
81:50:f0:b7:99:8e:46:1c:29:41:c2:25:15:1a:d7:
eb:19:bd:60:90:aa:71:19:76:04:aa:d9:73:4d:ec:
51:b0:db:7b:6e:5a:2e:86:72:73:ce:ec:ba:c1:2e:
f6:74:96:14:0b:0c:86:8a:bb:f0:65:f0:7e:65:04:
96:45:cd:21:82:55:ad:8e:a2:67:b5:cc:ac:f2:eb:
bd:2b:4e:6c:c8:50:b3:a2:ca:a0:9e:7a:fd:f8:2b:
be:eb:a1:ee:87:79:35:fe:26:6a:cb:a6:69:1d:72:
cc:1f:42:c2:c0:ee:13:f6:5a:b0:69:e6:4e:b9:26:
d7:ee:da:6d:7d:8b:b6:0d:d8:91:53:10:be:7a:a5:
c1:92:aa:98:ad:81:8c:c5:be:f2:45:23:de:11:5e:
55:86:c3:85:dc:dc:43:8d:47:ae:43:7a:e6:e9:c8:
51:9c:35:63:5e:d3:ac:77:ec:b0:0f:56:d2:81:d3:
48:4c:52:94:69:1d:00:61:9e:fe:7f:41:61:db:f9:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E4:8C:42:DD:AB:3A:EC:1D:DB:E5:72:FC:CD:DA:7A:51:26:35:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/edf0c11b-6e69-3f15-a940-e61cdf1c47f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.163.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:7d:1e:7c:ac:2c:b5:ed:c0:7d:6f:86:7f:57:b3:16:2d:54:
06:f8:8b:39:05:5d:ac:17:a1:29:e1:e3:d0:39:40:0b:75:01:
89:dd:d7:ac:0f:32:4b:a0:7f:6b:e0:dc:38:cd:1c:8e:9a:4c:
54:13:13:e5:db:ce:a9:b4:3d:52:20:79:94:f9:ea:85:d6:0d:
58:6b:f2:99:68:76:7a:01:7c:17:02:50:9a:82:0f:f9:e9:9d:
1f:23:af:56:ad:19:25:84:19:09:c2:39:a7:9c:3e:dd:1c:6c:
09:40:20:56:49:66:19:2f:01:d6:58:cd:4d:40:c7:db:20:dd:
bc:61:92:fa:ed:73:4b:02:85:ac:5e:0a:37:3f:5a:7e:2e:ac:
85:fc:1c:a4:a0:05:8b:2b:d5:94:4c:ee:1b:29:d6:82:50:bd:
8e:38:31:26:c2:b5:58:b2:5d:15:e5:b9:7a:a7:2b:2c:53:5d:
af:81:55:6d:65:ca:2d:d2:10:0b:44:6a:34:3b:03:0e:f2:4f:
f6:3f:2e:01:ae:9f:07:27:9a:3b:5d:8e:38:3a:b7:65:e6:43:
6a:c4:66:19:1b:d3:77:0f:1c:99:c8:90:6b:ec:57:00:b0:43:
77:69:7b:0f:78:4b:37:e5:b8:dc:23:9c:f0:f5:c4:3f:ab:f4:
36:66:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:47 2025 by rpki-client