Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dcd312e-5ffc-3424-86c0-3296e15d8e07.roa
File: 2dcd312e-5ffc-3424-86c0-3296e15d8e07.roa (raw, json)
Hash identifier: UkCsDUVfV9IBfQglyuyoWEvAL/FHlc+i8Lv77Q4cKqg=
Subject key identifier: AC:71:A1:FB:99:E4:FE:74:E6:F8:8E:A2:FD:83:F1:AB:7A:97:18:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF24C993DF0D4278FFEA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dcd312e-5ffc-3424-86c0-3296e15d8e07.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 174.173.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:24:c9:93:df:0d:42:78:ff:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=c010d2a4-9678-42f2-aed3-bcc5d677d269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1a:2f:4b:38:32:90:48:1d:46:39:f2:09:00:
b4:5b:c8:c3:1b:65:6d:bd:da:81:82:94:5d:37:42:
b1:fb:81:7d:60:bb:12:b5:71:77:72:1d:92:06:86:
aa:4e:04:cd:42:cc:5d:ee:d5:96:1b:2b:13:63:54:
24:32:8e:95:e7:8d:cc:4f:2a:30:8a:6a:5a:c3:d6:
3d:7b:56:15:c3:05:5f:63:ea:9d:1b:0d:8e:0d:c9:
03:db:dc:36:b0:8f:41:f0:31:1f:ed:ad:74:ea:cc:
44:d1:3f:07:ab:0f:15:a2:35:34:5e:78:76:3b:03:
89:0f:f6:92:64:34:1c:75:be:ab:ae:4b:b9:3b:9a:
e0:d6:42:5d:ae:33:ea:34:4a:db:ce:9a:15:fa:7b:
5b:28:d0:f6:1a:79:ca:51:ca:6d:3d:2d:a8:be:99:
8c:fb:5d:c5:6f:8d:29:9c:ab:8c:f5:98:f6:66:c9:
c9:85:05:0d:47:ef:94:84:df:23:1d:8f:c6:40:e1:
2e:f8:c7:71:cb:fa:e2:be:bb:4b:c1:3f:68:27:48:
fe:cc:1c:41:f5:a7:53:26:b3:90:35:be:06:65:2a:
6b:92:1d:82:e6:39:4e:fb:33:42:32:0d:5c:e6:48:
b3:16:50:63:c8:11:ee:89:21:72:be:3c:9e:4d:a8:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:A1:FB:99:E4:FE:74:E6:F8:8E:A2:FD:83:F1:AB:7A:97:18:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dcd312e-5ffc-3424-86c0-3296e15d8e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:23:71:1a:94:de:26:7b:4f:3a:24:51:e6:b3:78:c6:c7:3d:
7c:80:03:85:15:5b:47:8a:24:69:32:ed:91:72:18:1d:87:74:
07:31:ed:9b:9c:0b:8f:20:9b:0b:db:da:d5:90:66:28:52:d2:
8f:7d:c2:28:9d:4a:d1:cc:d9:5f:aa:32:02:4c:9c:c0:f0:1d:
6b:4b:6a:93:73:bb:f0:c2:5a:9d:6d:6e:f1:4a:6e:df:af:b6:
b5:39:d8:96:92:e7:69:5f:91:92:13:e6:92:27:2d:34:43:11:
b9:7a:db:24:9a:b1:22:1b:59:c0:37:db:7a:2b:08:68:67:16:
5b:49:fd:c4:b5:9f:12:9c:be:02:6d:27:e7:2e:9b:ba:14:c7:
28:49:6f:79:1b:95:ed:47:58:cf:79:f1:c2:b4:51:05:fe:81:
c4:4e:a9:4c:4b:b9:9a:30:3a:fa:5c:7e:ed:43:e0:2a:64:69:
1a:18:df:aa:e8:ba:a5:c8:8b:59:64:73:d2:36:2a:f9:d6:35:
d4:ca:43:0e:58:55:37:ed:64:d1:a6:2f:35:2e:5b:9a:f9:dc:
ca:40:3b:6e:05:f6:4d:cb:6c:f3:13:cf:61:27:36:f0:76:23:
3e:e9:31:10:94:ea:76:16:5d:9e:e1:1d:fe:9f:f7:25:69:71:
9e:a4:d3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:36 2025 by rpki-client