Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa
File: e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa (raw, json)
Hash identifier: nnR0GqVArGqHrpEe2yVA3AZoH//MR/kxLEcnyjsC85c=
Subject key identifier: 17:C6:B7:46:85:9A:8D:F9:69:23:B8:05:3B:CE:99:C8:88:37:38:1F
Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial: 010D0C9F432858484D758DBAE01D3210594C92C0
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 10439
IP address blocks: 71.6.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8d:ba:e0:1d:32:10:59:4c:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=3d167cf2-da73-465a-8ffe-76a094ba01c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:1c:1a:46:33:71:24:f8:a0:27:e2:b4:94:
69:29:b3:c9:15:41:9c:c9:0b:b2:26:c2:8c:6d:1f:
c1:0d:78:ee:b2:a8:53:c4:f5:d5:5e:cb:67:30:1c:
37:6c:1b:56:29:c0:79:28:3e:79:5d:5a:f5:c1:55:
fa:d3:a0:8c:d7:2b:c5:e6:af:e9:fb:78:dd:dc:f6:
49:04:8a:03:8a:7e:d4:50:8b:b3:0e:fa:b0:12:ef:
51:5c:d4:fd:67:61:0d:a0:7b:52:ae:d2:fe:a1:44:
12:40:8d:c4:3c:6b:fe:8f:fe:ac:e4:77:d6:db:e9:
75:1f:05:09:51:df:39:05:31:c1:57:ad:e8:f1:7e:
e1:f6:1d:a0:d4:79:a5:0c:97:8b:b2:8e:aa:b6:3d:
57:e8:96:7c:de:77:9c:5b:cd:54:ea:eb:67:99:5b:
17:13:4a:9a:46:06:54:9f:6c:8e:e0:c6:a4:86:f7:
37:6b:09:14:d3:af:1b:c9:67:27:22:1f:3d:4f:39:
b3:a2:74:d5:e0:da:f7:5b:12:63:f0:d5:9a:66:fe:
64:8d:e4:20:4c:5d:dd:e3:9a:9f:58:1b:99:38:31:
18:11:72:fd:50:27:16:c2:cf:de:41:e2:3a:42:49:
08:f7:12:c8:ec:bd:1d:10:6f:c0:4f:04:b8:5b:ce:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:B7:46:85:9A:8D:F9:69:23:B8:05:3B:CE:99:C8:88:37:38:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
X509v3 Authority Key Identifier:
keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
sbgp-ipAddrBlock: critical
IPv4:
71.6.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:76:0c:b7:26:87:8a:81:a8:7d:f8:ca:cb:3d:3c:05:55:a2:
10:86:5b:cf:df:d2:28:25:14:0c:26:1c:cd:62:26:62:45:1f:
78:97:96:89:43:98:d4:f2:51:9c:87:5c:1f:e1:ca:48:c6:74:
fc:0e:6d:cc:ee:34:c5:c4:cd:be:21:af:09:86:51:3b:a9:c6:
94:0b:f7:ef:05:a2:ca:4c:3e:97:03:ee:29:cd:e1:03:2c:4c:
66:b9:13:b5:eb:23:b8:6d:d6:0b:78:43:78:c9:95:0c:09:9c:
4e:fd:33:cc:e9:de:86:44:b9:40:cb:ea:89:bc:62:e6:45:c8:
18:89:80:5d:c2:c9:f7:3f:8f:36:93:6c:61:01:11:bb:a8:7a:
07:df:d3:db:1a:be:c6:94:b2:99:af:56:cc:3f:28:37:84:6c:
cd:16:50:50:96:fb:d4:15:74:fe:fc:59:8a:be:1a:fc:bc:35:
8c:f6:13:6b:54:cf:5c:d2:9f:60:ff:85:49:2b:e9:7c:30:33:
26:33:07:5c:ad:1d:2a:db:3c:af:dc:39:42:57:d0:50:7a:43:
ea:56:b7:69:f0:20:0f:5a:3d:31:a2:fc:bf:5f:bc:ac:29:24:
24:51:41:a1:be:8a:9d:67:ec:8b:55:92:11:c9:dd:c6:c3:ae:
66:8f:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:22 2025 by rpki-client