Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa
File: 0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa (raw, json)
Hash identifier: puP2iWcjsuGrcliwRidYYKdEJgug6NVnJuQOPReyhag=
Subject key identifier: 26:C5:F6:39:5F:54:38:FD:8A:6D:12:16:8C:10:4F:77:28:5F:0D:FD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CF014086521557C2C3F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 70.88.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:f0:14:08:65:21:55:7c:2c:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2c3992c1-c55e-412d-863f-40e4d8ddfac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:1e:6b:9c:b5:48:10:bf:63:6d:b5:1d:cf:
7f:dc:bc:13:4d:7a:13:c5:0b:e2:c5:9e:98:e7:64:
83:47:9d:54:ee:7f:a9:17:83:91:41:43:b7:1a:50:
8e:e5:9b:cb:7d:a1:72:ce:0e:d3:81:a8:62:d6:a5:
be:0d:91:24:b9:f1:87:45:a8:8c:89:25:78:dc:80:
72:73:d9:1d:c4:33:f7:3a:c8:c5:6a:ce:c5:ab:98:
ad:2a:2e:52:c8:ac:40:5c:bc:f0:f6:1c:3c:fd:47:
d2:b3:08:66:64:9a:3a:3a:08:dc:f1:1e:34:b9:98:
06:17:41:c0:34:8e:bb:30:50:61:c1:de:2a:98:24:
90:e9:84:46:d2:27:1d:84:37:f8:6f:ec:7f:4e:8a:
86:ed:31:b0:3d:b4:40:bc:b2:78:1e:94:65:b3:c4:
b8:bc:32:fc:8c:82:12:61:a7:e9:fd:cb:e4:01:93:
f7:ab:d6:79:b4:0e:58:76:c2:0b:4b:5b:6e:cc:5b:
a3:70:a1:6e:99:7d:6f:12:e3:5e:55:02:d8:7b:84:
bb:2a:90:48:ef:94:8b:fc:5d:51:a9:d1:a9:77:0d:
e0:05:52:48:2c:fe:d5:32:1c:db:b5:c0:63:85:a4:
1d:48:f6:75:4c:59:80:2c:8f:a9:60:65:ce:7d:eb:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:F6:39:5F:54:38:FD:8A:6D:12:16:8C:10:4F:77:28:5F:0D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f5a4cf2-d704-396d-afc1-8976b30cdcfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:72:7e:a0:cf:14:1a:4c:87:7a:e8:71:e5:2f:e0:8c:45:fe:
1b:5f:38:5f:31:50:31:19:bd:df:82:03:7a:fc:23:7f:0d:98:
be:80:94:33:9f:9d:17:8d:c4:c9:59:c9:c3:7d:69:12:3b:44:
2a:40:3c:ba:36:65:db:e4:24:e4:e3:05:f5:41:ce:fe:97:d5:
9f:f3:7a:02:02:4c:13:b9:64:f9:82:93:31:8e:0a:c0:ce:17:
6b:91:da:e8:70:90:2e:d1:0d:42:8a:62:a7:50:71:87:02:96:
e1:06:81:2c:c1:49:c6:08:84:23:2d:f1:06:af:eb:9d:4e:c4:
cb:c4:0c:89:f4:fc:2d:b8:13:3b:ea:e0:b4:1f:d5:37:58:35:
1b:31:40:8a:b0:67:81:39:b4:c3:0a:3a:df:f1:ef:38:28:c7:
36:33:ac:5b:f4:f4:ea:0b:de:09:30:ee:f1:20:d0:e3:6a:5b:
3b:cb:f4:11:67:a5:7f:93:71:59:5e:97:77:74:37:0d:c1:9f:
fb:9d:7a:27:5b:5f:af:45:c7:cb:19:dd:15:fe:21:91:7b:90:
f1:10:fc:96:02:b9:b5:9c:f3:d9:60:88:28:f4:7b:ba:b9:92:
ac:30:4a:2b:70:9c:da:59:ea:42:6a:56:6f:40:19:27:66:e9:
45:2f:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:04 2025 by rpki-client