Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa
File: 3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa (raw, json)
Hash identifier: 3ODIXK7qNlac9q76QX0vrNLJACOy+k6EDn4WvN0zsl0=
Subject key identifier: 23:D0:95:14:53:49:06:08:C2:09:DE:15:7B:AB:3D:AF:EB:0B:90:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB03527AE8FAB0FB7E54080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 67.166.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:35:27:ae:8f:ab:0f:b7:e5:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5043a04e-a046-41cf-963e-5e9574c113db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:1f:8a:76:d1:9e:dc:b9:0d:0b:24:d0:b1:
08:2b:80:68:1f:97:b3:d7:84:b3:66:91:0b:05:f1:
9d:de:e9:1a:9c:3c:38:43:25:e3:c9:0b:87:fd:26:
bf:90:e2:a9:37:45:ef:da:35:38:42:07:d0:f4:90:
e3:83:94:65:df:08:90:fe:b6:ae:44:b3:71:44:18:
ec:db:f1:e6:aa:cc:eb:67:83:23:80:ed:61:a7:17:
f9:49:29:d0:d3:47:13:ea:82:21:e7:d3:ed:bd:1f:
ee:7f:97:7b:51:0f:7e:ca:89:5e:42:8b:af:3e:d8:
12:4b:9d:d5:ae:4b:4b:d2:ba:b0:8c:48:96:eb:c5:
d6:4d:01:28:44:f4:26:46:b4:35:75:76:6f:ac:dc:
ed:19:1b:4b:8d:df:8b:49:13:3d:0b:91:93:97:5b:
f0:6c:d5:56:db:09:87:fe:4f:e4:94:ff:31:20:e4:
1a:8c:a4:90:9e:7e:42:3f:82:3e:87:eb:1f:8a:55:
37:4e:af:4a:5a:77:76:a0:64:ab:1d:7b:0e:2e:34:
07:83:ec:47:b2:52:07:53:e5:e5:e4:74:e7:f7:33:
b3:a2:8a:27:c0:c5:3f:14:88:07:3f:55:80:1f:5c:
7d:e0:bf:45:ed:1a:91:10:a3:da:24:1b:f8:6e:a5:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:95:14:53:49:06:08:C2:09:DE:15:7B:AB:3D:AF:EB:0B:90:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3975aa2e-31ca-356f-b442-2f7dc4360f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.166.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:04:0d:f4:2c:12:fa:ca:27:4d:3d:09:77:8f:56:45:87:b1:
8d:26:62:b3:53:63:0b:b1:91:a1:a4:57:0d:e3:40:4f:25:80:
75:27:4a:bf:8b:da:aa:f9:ff:04:82:ad:40:0f:e7:d9:eb:9b:
9d:b6:9b:66:dc:0a:30:04:3d:c6:02:3c:b4:78:97:24:c3:57:
8b:70:88:09:bd:59:cf:98:14:b4:3c:94:4a:ac:70:ff:37:c1:
c3:cb:0b:19:f2:e7:68:57:bf:76:63:fb:f6:25:27:25:be:e6:
d4:94:15:cb:17:b1:a3:15:88:f7:86:a9:3a:ee:31:ef:16:f2:
0f:b4:13:61:90:87:df:14:32:c5:11:05:30:ca:88:cd:39:48:
cf:67:99:f5:e0:7c:f7:6e:20:b3:8b:46:67:a5:6f:18:70:ce:
a4:49:72:5d:6b:de:f3:23:f2:b8:b6:37:10:b8:61:b4:98:a0:
f2:43:10:f3:bb:43:73:c2:7a:ab:19:b0:22:a8:dd:02:85:a2:
28:28:45:b8:de:ce:15:ec:02:b0:31:5e:16:55:97:80:32:48:
7c:74:15:07:90:93:19:54:69:f9:fd:ba:82:4f:af:ba:32:99:
20:71:7c:e2:81:99:f4:93:27:71:fe:3c:65:4a:c9:f7:cc:2f:
3a:f6:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:50:17 2025 by rpki-client