Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1077aba4-1732-373c-898a-560be2af53ca.roa
File: 1077aba4-1732-373c-898a-560be2af53ca.roa (raw, json)
Hash identifier: /Q6hRTxj+4WEdUudluKeDwGGNJr5hCwkhMD1JmWa45o=
Subject key identifier: 1A:AC:02:3E:04:4F:20:AE:1F:0B:23:2B:1D:E9:BC:C6:EF:71:E1:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB09293940B1B97AE278A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1077aba4-1732-373c-898a-560be2af53ca.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.224.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:92:93:94:0b:1b:97:ae:27:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=aabf8f61-33df-44a1-b55a-ac063408400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:93:64:f3:85:a6:41:43:32:0a:be:43:80:
bb:37:82:15:ea:2a:5a:e1:53:b5:06:d0:7d:2b:4d:
54:bb:31:be:28:d6:47:58:da:27:df:75:e7:b3:06:
6b:9d:db:70:8c:dc:82:4b:b1:07:95:f3:12:e0:d3:
06:53:eb:e8:20:a9:4d:e7:83:47:57:45:01:89:90:
e7:b7:18:08:6f:4a:63:d4:7b:4e:26:54:45:50:16:
ba:6c:9c:cc:18:ed:05:14:f9:47:c9:9e:5b:82:0b:
2c:49:5e:1f:1a:c5:d1:68:02:43:6b:9a:f1:4a:f4:
90:03:a7:6a:ff:3c:89:2c:8f:65:53:e7:78:53:d1:
32:b3:c6:41:ef:dc:11:74:0c:da:a4:53:0a:6d:a4:
73:52:7f:2d:61:12:da:27:25:a1:8a:ce:b6:d2:c2:
ac:d5:79:c7:c5:cd:b5:76:0d:1f:f6:1e:81:ba:6c:
d1:19:c2:cf:36:8b:14:53:94:60:b5:84:90:80:d8:
98:b7:87:b0:e6:ca:8c:b9:36:ed:00:e2:fe:0b:d9:
39:93:24:2b:91:bb:44:20:6f:d5:4c:cc:be:a4:63:
63:22:61:ba:1a:eb:e8:56:17:e4:86:70:3d:8c:65:
f3:b8:ff:38:e6:b9:56:ca:7a:0b:e6:bc:89:40:d6:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:02:3E:04:4F:20:AE:1F:0B:23:2B:1D:E9:BC:C6:EF:71:E1:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1077aba4-1732-373c-898a-560be2af53ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:bf:ea:81:3b:92:f3:2f:05:ca:1a:16:ed:2c:ad:2d:b0:09:
2c:25:46:59:f2:1c:84:33:56:a0:19:24:0b:3e:2a:8b:ed:21:
fa:81:5d:61:ea:a5:e4:99:73:78:9f:ec:7d:0d:2c:9e:49:f4:
60:81:9c:42:cd:fc:bb:c0:c1:57:cc:2f:fe:f6:46:d1:7d:ad:
a6:77:08:bd:9a:bc:d4:1c:47:3a:07:24:61:aa:b1:44:42:12:
3c:02:53:7d:92:31:ae:e5:e8:22:53:34:c3:78:c0:d1:ad:44:
dd:49:21:1b:98:cb:3f:8e:f6:f0:a4:8d:5b:db:c5:90:4c:c8:
fd:20:d8:7a:c4:ab:fe:24:bf:7e:25:bb:50:31:51:c7:c8:cf:
6c:5c:0c:09:07:6f:27:9e:3c:7e:49:d7:a9:c2:b5:a0:9f:46:
37:78:58:66:57:69:c2:53:99:23:7f:d9:b8:36:92:e4:06:45:
3c:4b:d3:82:b7:21:bf:04:38:7b:d2:27:e0:17:bb:cf:35:e6:
a1:e8:d0:c0:ff:36:1b:1d:8d:4f:02:f4:9e:2f:f0:60:f3:02:
e8:db:7f:6f:c0:3c:23:f1:4f:d2:1a:e0:55:55:e7:5e:17:54:
d2:1c:cb:1d:9a:45:38:27:1e:fe:c1:e5:5d:33:0a:0f:cc:a4:
63:d4:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:36 2025 by rpki-client