Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d6a46ee-3213-30ec-be1d-c004f5ac0c56.roa
File: 2d6a46ee-3213-30ec-be1d-c004f5ac0c56.roa (raw, json)
Hash identifier: 1DkOS/jGa6VdanMQo5P4npHiVOJdcKhVfL7Z/BqEU6I=
Subject key identifier: AD:33:EB:79:46:1F:18:AA:1A:3A:C9:A5:77:7B:66:BD:C3:B7:EC:6A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DD5A87C22662D05AFF000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d6a46ee-3213-30ec-be1d-c004f5ac0c56.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 173.8.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:d5:a8:7c:22:66:2d:05:af:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1470c5b2-33b7-448a-b402-440a57882d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:8f:8c:7a:bf:75:01:2d:3c:0a:89:3d:9b:
fd:3b:63:82:7c:cf:c9:54:02:ab:af:89:9c:8d:03:
ac:ae:40:59:8a:71:49:96:44:bb:3a:4f:37:df:89:
13:50:a2:4a:70:e7:5f:a6:4d:8c:30:62:26:a8:73:
b0:b2:8e:c9:58:74:d6:03:1b:f2:59:1e:26:ce:d1:
f0:57:f5:97:a8:1f:17:08:4b:68:d9:c4:3f:e2:e3:
d9:ca:43:37:17:00:f8:d0:7a:43:64:7b:0a:80:a7:
12:09:5d:b0:7a:67:35:ab:42:e2:5b:56:4e:67:9f:
04:1e:27:cd:28:b7:89:a9:a4:3a:4d:92:5d:77:30:
1a:2e:c5:d8:e8:9a:0b:78:ee:43:83:b1:65:07:92:
91:c3:6a:e2:8b:46:08:4d:49:93:6c:25:de:a3:25:
4e:7e:ef:90:c1:05:ee:8a:f5:3d:c7:e3:b3:1e:22:
16:43:53:9a:7e:e8:53:b8:c0:f2:87:12:3a:81:95:
86:79:38:e6:f6:3b:6e:76:60:49:22:3f:e5:c8:79:
6b:3e:2a:fe:4d:46:ed:d9:99:9c:5e:33:4c:6b:4f:
41:ef:df:51:37:26:b8:9a:18:d2:2f:5e:6d:80:59:
72:b4:75:32:28:0f:78:5b:e7:af:6e:33:1b:0c:50:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:EB:79:46:1F:18:AA:1A:3A:C9:A5:77:7B:66:BD:C3:B7:EC:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d6a46ee-3213-30ec-be1d-c004f5ac0c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
173.8.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f1:a2:e9:65:94:3f:e6:ba:2e:d4:9b:f1:58:30:2a:3a:a3:
9c:16:e3:ae:b1:3e:1e:db:30:29:e3:05:9f:76:5c:3e:40:41:
f6:5a:d1:b3:a4:23:67:e4:6e:f4:36:61:7f:44:86:32:52:86:
2e:7b:3f:5f:8a:2f:ca:cd:93:26:46:92:4b:ce:ce:c3:6f:98:
5b:49:de:a7:17:13:12:a7:6c:7b:69:4b:a9:05:5f:89:c7:c6:
d2:e2:c5:4c:25:49:9b:96:fd:39:3e:4b:82:37:c7:83:12:75:
5c:ff:d4:2f:01:1d:6d:5c:3a:54:7c:99:0b:40:f6:91:d6:ef:
24:54:ee:ff:e5:67:0e:5d:b0:70:34:23:a5:0c:f8:f8:8f:94:
96:ab:6f:63:72:89:aa:b7:61:17:c6:ae:67:45:a4:b2:27:4f:
cb:62:cd:24:b3:ce:71:9e:b9:3a:76:3f:08:5b:94:c7:99:aa:
5e:d8:b0:de:6d:ff:de:10:49:84:dc:08:19:b0:9c:19:25:87:
30:50:06:0d:b3:44:d4:87:32:e0:7f:92:4f:5d:28:2a:f3:8b:
c2:60:7e:6e:5c:b8:0b:05:5f:6d:dd:bb:bd:55:53:72:f1:01:
bd:ff:e5:eb:5d:92:b5:9f:82:a4:6d:b4:2c:10:e1:d5:98:ec:
3d:7c:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:27 2025 by rpki-client