Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7c1103-61f8-3c2c-bee0-c3ade3acc3be.roa
File: 2f7c1103-61f8-3c2c-bee0-c3ade3acc3be.roa (raw, json)
Hash identifier: O1vqYbqyQXbUZjgrm0XbX3ClA2MVUAZC79PF5Uq6JaA=
Subject key identifier: 86:55:B3:96:ED:4D:AC:41:BB:4A:A0:20:E1:B1:73:51:27:46:16:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6B87E5CCD1C5DC7402C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7c1103-61f8-3c2c-bee0-c3ade3acc3be.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 33659
IP address blocks: 174.167.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:6b:87:e5:cc:d1:c5:dc:74:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=d67a77b0-87e4-4a97-8b78-61131855f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:cb:6d:37:22:0d:21:2a:43:d4:37:82:30:
b2:9c:c4:a4:b8:93:e3:c3:9e:fa:9d:7d:aa:37:85:
fd:f6:b2:c0:88:ea:62:9f:c7:b9:7e:09:50:36:78:
8b:e8:96:1f:57:05:b8:0e:c5:07:d5:58:72:e7:14:
8a:91:d2:5f:70:05:09:83:e0:8c:b2:c7:29:f2:8f:
df:08:4f:a9:ec:84:e5:a3:4e:08:82:8c:f5:54:ce:
a8:ab:07:09:10:42:c8:46:5a:dc:56:2e:de:10:e9:
83:b7:57:22:f6:12:3e:1e:05:96:ec:b5:50:f6:35:
d5:10:48:f0:96:f8:be:38:f2:60:58:e6:8f:2f:b5:
92:28:5d:39:36:be:16:0d:c8:a8:66:e2:f3:8a:1a:
54:47:88:28:90:44:97:d6:74:b6:62:14:c8:e6:6a:
59:14:de:03:32:f8:68:4f:df:b6:d8:27:8e:b2:60:
0f:30:00:dd:42:ab:a2:3b:0f:fa:dd:a0:17:07:ad:
55:fc:19:25:70:65:0a:b4:9e:3e:27:92:c6:f3:20:
13:cf:a8:73:d9:6c:ed:65:e2:10:b3:c7:11:06:b9:
fb:80:89:2b:2f:bd:3c:c2:8c:63:e0:81:20:0f:0c:
68:d9:4b:6b:ae:04:0c:4c:ff:5f:1d:79:8a:5e:3b:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:B3:96:ED:4D:AC:41:BB:4A:A0:20:E1:B1:73:51:27:46:16:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7c1103-61f8-3c2c-bee0-c3ade3acc3be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.167.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:2e:79:d7:66:71:62:24:41:1b:95:05:cf:ab:f0:28:d1:f0:
76:f5:c9:05:07:06:46:0d:0a:5a:12:b7:5e:55:ba:be:73:8c:
40:aa:14:33:e3:3e:bc:6f:0a:5c:54:9a:d8:dc:09:e7:67:01:
fb:1e:58:88:cc:f5:41:dd:e8:d8:01:23:df:e0:03:82:f7:20:
19:68:da:05:2e:51:88:9f:cc:5b:c9:7d:97:08:4e:ac:3e:64:
10:88:3e:ac:77:00:72:a3:bc:c7:3b:10:2a:42:e5:d3:8f:ab:
b9:36:a1:6e:c6:12:aa:4f:c2:6d:0d:7f:44:b8:db:6a:62:88:
9f:ea:cf:6f:92:46:75:ef:cc:8d:4d:94:66:a3:5c:10:b8:ab:
d0:79:75:4b:f6:db:6a:35:23:92:fb:47:4f:e2:d7:c6:0e:3b:
66:bf:b8:d1:30:a4:e6:3b:db:90:92:80:5e:c0:ba:0b:ff:53:
32:fa:16:78:f4:45:5e:d2:68:8e:a8:30:60:66:c1:29:a4:e6:
d0:b3:80:34:f7:e5:39:18:ff:11:81:1e:fe:5f:ce:b3:61:77:
ca:dd:76:8f:f0:be:92:f9:d3:8e:98:f6:53:fc:a8:bb:23:40:
67:72:c3:8d:ca:02:b9:97:ab:27:d7:fb:85:de:4c:05:b7:fa:
5d:85:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:41:49 2025 by rpki-client