Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a45487-cc5a-3cd5-a717-5fecdcc7a6d0.roa
File: 38a45487-cc5a-3cd5-a717-5fecdcc7a6d0.roa (raw, json)
Hash identifier: BWQeODhTrSCmt0Zv0bKCB5ZfRfsmviXW6vdo7cUz3ps=
Subject key identifier: D6:AE:AD:1B:39:CF:F7:B8:72:44:D9:34:17:2F:88:F6:2B:E0:0B:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6D3C4BA631843E536500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a45487-cc5a-3cd5-a717-5fecdcc7a6d0.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7015
IP address blocks: 50.170.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:6d:3c:4b:a6:31:84:3e:53:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=95eec2ff-362f-49f3-90c7-11784c163967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:ae:98:3a:67:d5:07:0d:02:2c:54:63:ae:
8a:6b:63:9b:3b:aa:fd:1a:4a:f5:b1:24:c0:b5:70:
5f:fd:6b:8d:85:e9:3e:0f:ea:e8:ae:36:85:56:26:
d3:03:7e:f9:68:82:45:98:89:17:42:a6:1b:16:95:
06:4c:1d:85:eb:29:53:65:ae:b8:31:c3:47:58:5e:
50:b1:9c:c3:e2:85:ca:e5:1e:7d:16:1d:0d:e7:25:
26:cd:75:a8:cd:4f:51:86:49:57:40:70:01:98:5f:
47:3f:0d:89:6d:f1:2e:e3:2c:0e:05:91:89:a3:7e:
93:a1:55:5f:12:4a:8b:bd:e6:5c:43:78:04:c2:3c:
e3:f0:6b:a9:fb:29:20:d8:b3:64:c2:5b:8f:81:24:
be:3a:1f:6e:e5:4a:4a:8f:ca:65:0c:56:4a:99:13:
16:fd:ff:56:73:a8:67:39:b0:c7:f4:32:f8:0b:29:
0d:db:19:56:ff:56:e7:a6:05:ca:fc:bf:08:19:71:
c8:96:d6:63:e3:f9:9e:e3:84:6e:78:8f:86:15:37:
33:4b:b0:d8:ec:f7:3a:b9:c3:e5:69:30:4c:aa:54:
a4:d1:c8:b6:1d:92:f1:f4:17:d5:4e:ad:23:29:19:
64:93:07:a8:17:d1:fa:4c:e0:9a:80:97:69:04:87:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AE:AD:1B:39:CF:F7:B8:72:44:D9:34:17:2F:88:F6:2B:E0:0B:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a45487-cc5a-3cd5-a717-5fecdcc7a6d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.170.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:45:22:cf:c4:6f:84:6b:14:f3:be:c8:4f:d8:da:80:15:db:
b5:7f:6a:77:37:d3:b4:55:62:ae:2a:a3:b3:7a:9e:b8:ae:7d:
26:97:44:0d:aa:f9:50:aa:39:01:12:24:30:27:9f:c2:bd:cd:
4c:ee:bd:c6:47:82:2e:3f:64:32:b6:71:d8:27:d2:ee:49:d9:
4f:65:c4:66:3a:77:d2:4d:1a:c0:d6:a6:80:82:73:b7:a3:2b:
89:b2:39:1e:2a:b9:03:12:92:b0:33:ad:5c:89:31:ae:4c:cd:
c3:f8:f1:39:a4:5f:78:95:10:b1:4a:d1:a3:fd:6a:7b:ac:62:
bc:47:b1:cd:1f:2f:45:a9:4d:c9:03:79:af:a9:47:6c:94:d0:
d7:e3:28:eb:d2:30:83:2d:c0:3c:4d:f7:bd:25:d1:e0:c2:cf:
d0:f2:e4:11:37:dc:06:1e:e7:e9:39:17:f4:22:54:fd:a1:02:
c1:ce:6c:d9:48:5e:12:a7:bb:a0:3c:76:3d:12:ea:8b:8c:38:
71:db:ac:a4:a6:b4:dd:b1:79:f9:35:5f:ef:bc:cd:b6:68:db:
d8:46:0b:16:06:d4:0a:5b:18:83:43:1f:2d:8c:64:87:70:20:
c6:68:b7:11:ba:28:64:61:f8:8d:a2:7d:88:77:00:3c:73:67:
0d:65:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:04 2025 by rpki-client