Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa
File: ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa (raw, json)
Hash identifier: blD0gedXGK1L8Tu96DQTgJm6bJ/o2+ujiETi4XMrZEk=
Subject key identifier: A8:65:D1:AB:F7:E0:01:CE:21:1D:2D:B5:B7:6E:86:25:E8:1E:C3:1C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11F4F071AA161795816A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 69.248.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:f4:f0:71:aa:16:17:95:81:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b74c2478-27ea-4af2-ad8e-7ee1b0723cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:9d:13:54:0e:07:fe:6f:bb:ec:f2:5b:99:
f2:44:1b:16:87:9e:3a:f1:f6:82:03:a4:c8:41:a1:
58:c7:23:2a:2f:e5:eb:9e:11:92:66:ff:8a:18:b0:
7e:9f:29:8f:d8:38:23:4d:b7:1a:9e:22:39:cd:46:
78:92:90:d4:ea:a8:b4:7e:83:1d:8a:12:0c:b3:fa:
ce:b9:42:aa:a2:c1:5f:dc:a7:ea:9c:cf:b0:13:a2:
c1:22:fa:ae:1c:b8:06:e6:b8:fd:ec:d5:4a:21:48:
2d:73:56:df:70:89:2f:9e:1b:13:16:b3:d8:7a:ba:
40:d3:8d:4a:10:4f:e7:66:6f:54:55:f6:c7:b3:25:
46:6b:e0:42:81:09:e4:28:1f:91:bf:98:96:c2:82:
8c:4d:b7:5f:77:6e:d5:85:f6:cf:a9:05:00:01:48:
6c:9f:70:06:6e:11:02:53:06:44:79:86:46:d4:6b:
fa:b8:63:07:a0:58:3b:41:04:55:93:9e:31:98:09:
37:5c:a5:ea:f8:2c:41:c0:da:34:9b:95:5c:7f:dd:
7a:b7:cb:4d:ab:af:3b:50:f5:a8:db:1c:e8:f4:ef:
2c:24:83:30:6b:0d:2a:d1:c1:7f:6e:a8:d1:ca:15:
c5:0f:1e:6b:df:c6:3e:d4:76:da:61:49:b8:c7:ca:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:D1:AB:F7:E0:01:CE:21:1D:2D:B5:B7:6E:86:25:E8:1E:C3:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.248.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:33:c7:fd:95:3f:b0:58:8e:6a:e9:4f:cd:79:de:11:f1:32:
21:d2:28:8d:92:e2:de:3d:a9:7d:05:91:f1:f6:3b:81:91:6a:
96:59:fe:12:2e:b8:36:b6:67:61:6c:eb:c2:d1:57:3e:20:7d:
91:17:16:12:53:15:7b:3f:0c:f8:d8:81:02:85:bb:c9:69:19:
0b:1c:b9:a6:05:91:23:ca:11:39:2f:2c:72:09:b2:bf:70:42:
bf:4d:64:66:92:d8:36:8c:38:c1:53:52:8c:91:5e:7d:7d:ce:
c4:79:29:b7:5c:a7:57:8a:39:75:d3:fc:b7:ca:79:2c:ab:ce:
99:b7:49:b5:7b:93:4f:b5:b7:a4:12:28:53:ca:07:5d:af:56:
10:a5:38:98:5b:be:bd:f9:f0:eb:c1:7a:38:a5:10:0e:24:54:
d9:af:72:72:b9:42:98:2e:f1:9e:50:3e:f0:cd:7a:15:49:f5:
19:32:66:a2:91:c4:8f:e1:19:c2:b5:bf:27:78:6a:4e:54:0a:
e5:71:e4:3b:7e:c8:9a:0c:96:58:f5:44:01:34:51:49:f8:4f:
24:d8:ab:b6:8d:5b:49:c8:2b:67:17:77:0e:4a:c6:a1:20:1b:
c6:3d:bd:48:a7:b6:1b:64:e7:0d:c5:00:2b:5a:a6:3c:a7:12:
bc:28:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:51:04 2025 by rpki-client