Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce9e01e-4a4c-3d20-a12d-a8a878d2bfbd.roa
File: 3ce9e01e-4a4c-3d20-a12d-a8a878d2bfbd.roa (raw, json)
Hash identifier: 2kYiDWSP6QKYbrg9mHmhIDuH6hhQCI/F5oTqGJ51NtQ=
Subject key identifier: 65:C7:42:7F:02:DC:5C:20:28:17:36:05:D8:02:C2:A7:48:39:88:5D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D8695E0961BD8173F8340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce9e01e-4a4c-3d20-a12d-a8a878d2bfbd.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33662
IP address blocks: 74.95.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:86:95:e0:96:1b:d8:17:3f:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=4aa0f9ec-3434-46a9-bd54-99b32828a33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:4c:13:03:d8:93:dc:57:aa:55:a2:1d:d9:
d7:27:69:48:5c:c6:65:3c:8c:17:6b:be:8a:ca:e3:
67:f2:e7:c4:c3:c5:96:c9:bd:80:56:03:0d:23:23:
8a:9b:96:19:37:ef:6d:54:98:e5:df:d2:f8:ab:52:
89:93:43:b8:89:bd:e1:fc:1f:e8:69:41:d5:42:19:
55:09:2d:36:b6:bf:61:70:bd:84:27:2f:be:90:91:
d3:30:4b:e1:03:ee:06:6b:8b:50:39:50:32:33:13:
f2:fc:60:21:ae:5a:70:9a:d3:74:f2:58:93:df:5e:
28:7f:71:44:9e:99:2e:88:be:c3:80:75:5e:b8:fc:
5d:70:7e:96:63:5b:93:82:a4:82:b5:37:32:78:3d:
08:a2:99:9a:02:1c:9b:c5:b5:b2:3d:2c:69:66:3e:
b3:12:90:0e:b5:fc:a1:a5:03:f4:21:f4:10:fd:c9:
b8:3c:d8:31:1a:12:a7:36:5f:d1:8c:56:e4:ab:b3:
d8:da:11:b8:cb:2e:ab:34:69:26:ed:67:af:ad:46:
7d:1a:90:5f:f5:f8:7a:b4:be:9f:f6:45:31:79:70:
b0:4a:eb:f2:5e:cc:42:55:b3:cc:65:af:62:3f:33:
b7:70:cb:0e:c6:84:cc:3d:94:40:e4:37:83:33:78:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:42:7F:02:DC:5C:20:28:17:36:05:D8:02:C2:A7:48:39:88:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce9e01e-4a4c-3d20-a12d-a8a878d2bfbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.95.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:82:10:0f:fe:12:6a:0d:fc:ad:6c:8c:b6:e9:dd:95:e8:04:
df:2c:5f:13:5d:50:2e:aa:ce:80:a8:88:89:bb:23:4b:5c:5c:
25:bc:c5:96:b5:e4:50:3d:6d:b4:b7:89:68:95:72:75:f9:0a:
72:7a:37:d6:b6:78:c1:05:23:28:6d:e3:c2:1c:b2:6b:8d:79:
2c:d8:79:c5:b8:40:08:ec:25:6a:9e:d8:a5:cb:fa:1e:e4:86:
73:b1:ed:84:6e:19:86:9c:ad:80:6e:13:94:f2:5e:74:db:4e:
ed:d7:28:03:90:cf:b7:f3:73:09:29:00:82:a3:5f:08:05:1c:
de:f2:20:26:ff:13:c8:c4:ff:18:9b:4b:52:05:50:9b:9d:8e:
e4:48:5f:9f:4a:6e:97:f1:c5:f0:66:84:0c:63:a3:4f:e6:29:
1b:27:25:ca:1d:e6:0b:51:8e:14:6f:d9:d5:a1:d7:a0:b2:e3:
5b:08:27:f2:d1:b4:3d:a2:c3:ee:3e:41:75:da:21:ed:00:ca:
a4:b5:bd:e9:f7:42:33:44:f1:a6:82:5e:49:19:f7:f8:01:71:
59:b4:49:41:5f:41:63:3f:28:7b:a8:9c:2f:c6:de:4c:8f:69:
f5:32:a9:7b:ee:cf:39:9f:b0:97:d5:9b:56:ff:ba:88:7e:59:
55:e1:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:43:05 2025 by rpki-client