Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3929afb5-38a3-32fd-a334-1669e73e0627.roa
File: 3929afb5-38a3-32fd-a334-1669e73e0627.roa (raw, json)
Hash identifier: NWV10v+xTZhobtfJeJTunIx3ZR09+rWCbWGGJI9ZQfc=
Subject key identifier: 32:2A:AE:E5:C7:A4:E0:05:CF:A9:28:21:47:F9:38:D1:82:EE:19:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C354B5D44A5B9CF68AB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3929afb5-38a3-32fd-a334-1669e73e0627.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 13367
IP address blocks: 66.41.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:35:4b:5d:44:a5:b9:cf:68:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=a10e2294-c09d-4158-b5d3-20f1faca452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:36:7f:b5:60:d8:23:2d:67:a4:23:32:99:
ca:61:9d:ac:0f:8e:d1:2c:31:3e:59:a2:57:28:87:
5d:53:b2:87:27:1c:b9:ee:c7:c9:44:97:24:cd:65:
95:a6:d7:90:0d:e4:12:73:a3:ee:d7:8f:7d:be:b1:
af:12:38:0e:8f:ff:cb:32:8f:dc:2a:db:6a:10:4f:
a7:4f:66:45:89:e9:2c:4d:0c:b0:3e:31:f5:73:28:
62:69:f3:32:95:9b:24:64:fb:04:92:84:96:6f:e6:
a7:b3:36:17:f9:4b:41:31:d0:bd:d1:24:e9:02:fa:
50:3b:6c:d7:bc:36:6c:1a:3f:df:77:a2:a0:30:b7:
f9:6f:fe:93:f6:89:05:96:55:b6:49:50:46:5d:5b:
9d:5e:08:60:5d:7d:c5:02:e0:86:74:c1:ab:13:09:
ad:bd:a6:d7:97:89:33:0f:b7:8d:d7:55:31:10:c5:
c6:d9:20:a9:16:0c:ea:7e:41:52:b3:74:ca:9b:a9:
f0:b6:ba:88:58:e2:aa:11:1c:04:4d:50:ca:8b:76:
f4:20:c2:4b:7e:17:54:b6:f2:f6:db:b6:71:42:c5:
0e:ee:e1:d0:05:15:3f:a0:50:0b:dd:4d:7c:58:d6:
02:f0:17:2d:d6:43:97:e6:fe:07:1f:6c:b4:21:0b:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:AE:E5:C7:A4:E0:05:CF:A9:28:21:47:F9:38:D1:82:EE:19:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3929afb5-38a3-32fd-a334-1669e73e0627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.41.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:82:2c:48:07:bb:8d:2e:32:15:00:bf:55:a7:1d:48:41:8a:
da:1e:d2:a0:19:9d:fe:35:d1:d5:15:d1:f2:5e:6e:44:a7:6f:
6b:69:57:49:22:98:14:09:d2:fe:f4:92:f5:4b:2d:38:f3:ff:
24:f5:7b:a2:11:6b:5e:26:79:fa:b6:45:b7:5f:84:f1:8d:fa:
df:13:3a:ef:d9:40:b4:ee:7f:3e:d2:e6:46:57:1c:b8:07:69:
ac:df:4e:ee:4e:89:90:09:c0:53:f5:d2:8f:63:d5:62:0e:2e:
ba:c4:c7:50:71:fa:49:53:f0:e8:ee:bc:03:fa:78:06:d9:c6:
0e:5c:0d:98:22:58:b5:46:07:8e:e7:2f:38:b6:2b:0a:01:34:
a2:78:e6:c4:ef:a9:46:2e:a2:62:94:df:95:45:25:b1:d6:d1:
84:cb:62:9a:38:53:95:d4:59:ff:97:cf:92:3e:90:d9:2b:60:
7b:d5:9f:cf:db:8f:82:bd:08:aa:ad:ae:34:e8:45:5e:f6:74:
be:03:4c:1f:ae:6e:0b:0d:d7:c0:71:17:1d:41:9f:0c:34:4f:
b4:9f:cc:4f:9d:4a:30:f5:15:8a:3c:8b:49:ff:22:db:64:98:
cd:3d:60:d3:5d:3c:fb:83:56:08:98:73:3a:c3:58:fa:b2:b7:
3b:79:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:05 2025 by rpki-client