Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa
File: 3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa (raw, json)
Hash identifier: EkHWtSzIXh0kEvS1CwVHR976KT6ZQ5CX3MnWMXRvg8Y=
Subject key identifier: 7F:1F:47:1C:30:3A:18:88:BD:62:87:20:81:17:87:E9:FC:C3:88:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F86A54F61B909CC43C4C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.232.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:6a:54:f6:1b:90:9c:c4:3c:4c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=9b477101-e5c5-4568-bfd0-c8ce2a3b5ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:a7:ca:d1:65:9d:03:2b:c7:e8:48:a1:02:
3a:00:5b:de:71:6e:d0:87:15:60:86:50:f5:90:18:
20:19:c2:c5:68:90:5e:bb:3c:2c:40:41:f4:20:43:
13:cc:14:63:c0:eb:78:ca:f7:b7:68:ee:06:33:d0:
81:a2:49:e5:ad:34:0a:67:f1:19:ee:ff:40:93:18:
a4:b1:49:d9:8b:06:d7:2c:3d:b5:66:6a:a1:09:fe:
3c:31:73:38:6e:20:19:9b:b0:1b:b2:14:af:bc:d3:
44:70:a3:41:97:f0:b3:b6:c9:6c:b6:ff:49:c6:07:
d2:13:49:61:90:29:fa:bb:8b:46:7f:38:6f:6f:1b:
c7:84:4b:15:ce:ee:5f:48:ba:cb:df:6c:73:a8:0b:
7e:70:67:73:f3:71:14:c8:62:27:3a:db:27:97:b0:
e0:d3:34:64:dc:5f:bf:6b:a3:30:23:64:1f:b0:95:
3e:fe:71:38:a7:2b:5a:f9:3c:79:6d:b7:6d:11:4e:
93:ff:83:03:ed:7b:a9:ec:5b:ba:b6:7f:a7:75:e8:
e9:07:39:67:01:da:7c:57:49:1a:5c:7d:53:49:fa:
5c:55:1b:cf:56:97:3e:61:3a:4c:5e:14:3b:41:e7:
08:7d:4c:d3:df:f6:3b:bd:46:51:55:7b:95:48:4d:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:47:1C:30:3A:18:88:BD:62:87:20:81:17:87:E9:FC:C3:88:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:9b:b6:6e:79:18:54:fd:04:93:c9:8b:cd:b4:91:55:e5:a7:
ec:7b:f2:f5:20:69:98:e9:e7:db:be:47:8c:a4:94:7e:f1:3a:
9d:e5:02:07:2b:16:64:f3:e4:d7:7f:fe:6d:f2:40:b9:a6:c0:
ed:5e:36:89:4f:83:d5:66:ab:f5:36:4c:5f:12:47:42:90:9d:
bd:6b:9c:8a:e0:fe:38:27:00:ef:ea:3a:52:1b:c3:dd:d6:b4:
76:41:14:97:a5:4a:d8:cc:d2:db:df:ab:77:a5:b8:e1:43:a6:
35:8f:79:16:1d:75:06:c4:e8:9e:f2:bf:7b:12:7a:73:db:80:
40:c8:33:2f:93:a1:a1:c5:d3:96:76:c6:02:38:f6:d0:ea:fd:
86:9e:2b:3d:dd:62:7a:87:6a:d8:1e:a5:3e:23:63:c9:67:1a:
01:6a:87:58:4a:01:a7:76:c5:dc:6e:90:86:ed:6e:e8:70:a9:
c7:0c:c3:7d:81:bd:a7:cf:af:51:e3:e5:c4:7f:37:15:7b:d3:
96:84:ed:7e:e7:35:b6:b8:24:36:72:6a:c2:b2:84:30:83:8d:
22:82:41:34:80:e9:d7:c2:9e:29:03:2e:93:e7:4e:38:84:b3:
b7:0f:56:30:41:71:09:ae:13:ea:f9:02:d4:a1:b9:91:20:c2:
c9:e4:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:02 2025 by rpki-client