Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10f53ca9-5beb-3603-b596-d6e2db88f557.roa
File: 10f53ca9-5beb-3603-b596-d6e2db88f557.roa (raw, json)
Hash identifier: Q/aEgOYv22UjGJB/eSggRDwNpkDUIkVU3Hd7jbKiyXc=
Subject key identifier: 8B:84:1C:6E:EE:60:AC:42:12:A4:DB:2F:B6:1F:C6:5B:2F:5C:21:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E308AED9153042255BD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10f53ca9-5beb-3603-b596-d6e2db88f557.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7922
IP address blocks: 70.88.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:30:8a:ed:91:53:04:22:55:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=518bffb9-16bf-433c-908f-af52e488a908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:ee:ec:ae:61:cd:b1:08:bd:c5:d9:e2:53:
2a:da:1f:45:6a:10:ec:2d:a2:86:84:58:26:02:a9:
7b:ba:e5:fc:dc:ee:7a:31:2e:64:43:44:59:00:92:
9b:65:11:c0:42:f7:55:20:09:96:41:3e:31:5d:cb:
de:b8:65:cf:3a:98:4e:a9:3d:f6:8b:d4:cc:eb:df:
28:31:df:0a:d4:a4:ae:da:99:e0:0c:b3:22:ba:8a:
f8:76:3f:a7:3d:69:c7:74:b5:3f:3e:a6:a8:80:d6:
84:d0:74:35:5d:8d:7d:b5:53:4c:51:7e:0e:2a:45:
a8:42:a2:f9:b6:7b:17:01:03:9a:6b:d9:70:fc:d5:
7f:3f:9a:fc:b0:f2:09:46:2b:b2:22:c6:83:2f:f6:
c7:28:2e:2f:9d:59:c9:21:c6:0a:54:02:f5:62:29:
c9:d5:84:5e:9e:1b:4b:03:6a:df:a6:3e:9c:de:30:
f3:c5:fd:39:45:19:50:94:9f:fc:7e:8f:8a:5d:f6:
9b:23:5f:6a:cf:41:c8:ff:52:4b:22:24:8b:e9:68:
0c:06:d9:8b:cb:74:e4:e0:57:20:d5:8f:07:9b:31:
90:ce:07:2b:8a:c3:48:d8:84:82:73:78:7c:cb:19:
bf:62:fd:80:19:d7:a9:23:a9:c5:97:3c:0c:ee:e6:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:1C:6E:EE:60:AC:42:12:A4:DB:2F:B6:1F:C6:5B:2F:5C:21:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10f53ca9-5beb-3603-b596-d6e2db88f557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:75:0d:93:7b:03:be:be:d2:ee:04:7f:d6:52:db:75:8e:7f:
ef:7f:2e:84:48:9c:63:06:54:d1:c9:db:0c:85:88:27:14:46:
c2:4d:c9:72:e6:dd:8e:38:03:df:b6:92:af:0b:be:ea:6f:9c:
86:a1:16:6a:cc:8e:8f:fa:32:dc:03:19:43:91:82:78:a9:e2:
71:23:ed:85:55:33:60:9a:fb:0a:a5:a6:62:47:6b:56:90:3d:
32:0a:05:14:53:16:39:12:95:b1:6d:05:a2:5a:0c:33:ad:9e:
78:aa:9c:2d:d7:6d:7b:1f:ce:4e:16:cb:ff:cb:4a:34:aa:45:
3f:84:ee:37:0a:45:19:ff:f3:69:61:d4:e2:e0:7b:13:65:90:
19:7e:94:49:95:55:94:99:7b:3d:e3:d1:9e:b6:4b:1c:35:5c:
db:07:c9:8c:7e:a2:1a:44:0c:28:8d:10:8e:40:21:2c:79:8a:
e5:9c:85:f9:c0:d4:9a:84:12:2e:0d:fc:8a:6c:4c:44:32:70:
6e:73:9b:d1:f7:5d:4a:be:28:44:d6:8f:5f:e7:20:d1:bd:84:
07:92:2c:15:18:50:e1:25:e2:8c:63:1b:af:c7:08:fa:83:e5:
a3:67:3b:33:8a:8f:3c:33:c7:85:3c:e2:e0:91:c0:e8:e9:24:
85:08:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:04 2025 by rpki-client