Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa
File: 38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa (raw, json)
Hash identifier: NVRS1klq9K+rHkMnSVoZyglj4pwAqVFkvyDpQBFfbek=
Subject key identifier: 12:1D:E9:9C:7C:79:F7:A0:AB:56:AA:D1:8E:77:18:53:25:A6:3D:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22BE7FAAAFC9338A76D4D30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 174.161.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2b:e7:fa:aa:fc:93:38:a7:6d:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=35e1918e-6107-44a7-9272-aec38acf5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:ab:9a:b8:a3:80:d2:33:e2:31:a8:b5:2b:
9a:1d:ff:3f:cb:d0:78:b0:93:8b:6a:c5:d6:93:6d:
b3:48:bd:ec:f5:c0:d9:be:8e:1c:e8:ad:8e:26:8b:
04:3d:2c:00:49:78:c7:6c:f6:72:01:56:08:22:b2:
31:cf:35:0c:f5:0a:64:a7:80:74:a9:21:9b:4e:23:
21:99:77:bb:46:b8:fb:6d:14:77:38:2e:3b:ea:c4:
74:3b:74:98:e0:ab:60:6c:fa:0c:5a:c7:10:46:2a:
15:bc:10:5f:a5:09:9a:af:4f:62:d0:5a:48:c8:b3:
6e:3c:ed:0f:6f:4a:8b:0a:98:eb:aa:17:15:aa:56:
25:f7:4d:bb:3c:0d:58:9f:5a:5d:e4:a6:85:b2:48:
1b:4c:46:b9:d7:0d:5a:19:9c:64:d1:ff:54:6c:fe:
4b:69:58:37:9b:1a:f8:6a:e5:80:f2:88:80:ce:e7:
39:02:a8:bd:fe:13:a4:45:4a:e4:ed:5d:83:9d:a6:
81:d5:62:8b:84:cc:e4:06:55:78:7f:54:2b:78:53:
4d:2f:96:09:a9:bc:57:5a:5c:4e:92:90:f0:85:25:
8f:2a:4e:8a:2a:7b:49:41:eb:15:5a:c2:c9:4c:18:
4b:fe:23:02:5e:59:76:30:d0:c7:15:b4:d8:d3:cd:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:E9:9C:7C:79:F7:A0:AB:56:AA:D1:8E:77:18:53:25:A6:3D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.161.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b6:4c:d3:2f:2b:75:fd:10:4f:6e:c3:a0:fe:76:84:01:64:
17:97:93:c8:5f:a6:ba:64:4d:d7:52:f0:0f:bf:64:75:14:89:
c5:54:2d:fa:25:bf:c4:45:df:aa:a6:70:23:75:63:81:48:d3:
88:64:37:ab:f9:b8:33:cc:79:77:6b:24:02:b9:53:da:cd:65:
58:d0:48:92:79:ae:ec:ab:66:d7:0b:4e:a1:61:a7:92:03:6f:
a7:5f:95:4d:6c:02:b7:be:5c:3a:2c:59:b8:9e:ab:96:69:4e:
3a:0a:f1:c3:2f:79:42:3e:0b:b7:36:d8:43:8f:1e:f7:8d:87:
6c:b6:7a:93:46:e3:a3:59:8c:65:fa:e2:4c:84:ad:5a:a9:05:
69:09:22:6c:51:b8:f4:1a:db:fe:58:19:99:ff:1f:d7:c3:de:
23:58:11:df:a7:b6:a2:c8:7e:dc:ff:23:93:85:66:d4:78:91:
f9:47:66:14:87:c1:85:45:c3:41:c1:eb:6a:bd:db:8f:62:d7:
ad:72:d5:b6:b6:6a:09:16:79:19:fa:8c:e4:ba:fe:60:bd:94:
79:dc:8f:2c:2f:95:fb:5d:cc:d6:c3:c2:b7:d2:f9:81:1c:72:
45:69:23:bf:65:60:a6:53:6b:e7:6f:ae:20:62:40:99:45:45:
7f:87:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:55:09 2025 by rpki-client