Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4212ab29-fff7-3cf2-a6b0-214567bde27a.roa
File: 4212ab29-fff7-3cf2-a6b0-214567bde27a.roa (raw, json)
Hash identifier: XLQpFx4Yzzh/EZFVavFsCvpFM8Ge105oeNLdJ3vXvm8=
Subject key identifier: ED:ED:DF:30:A6:F8:10:B1:76:25:31:CB:1B:2B:A4:D8:27:4C:1D:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22BE80E39E837068AAAF580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4212ab29-fff7-3cf2-a6b0-214567bde27a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 174.161.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2b:e8:0e:39:e8:37:06:8a:aa:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=1ab0380b-dda2-4b86-9c9a-7a1c114af26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:72:71:25:90:f0:b7:c4:98:ff:00:7d:ec:
73:15:3c:1e:29:39:13:c9:7e:6d:d8:7a:e2:2b:0d:
aa:a0:63:5d:64:45:1e:20:50:e5:29:85:e3:93:6e:
6b:96:81:78:50:8b:76:5a:bd:66:14:88:7f:f9:92:
7a:9e:75:ac:6e:0e:bf:38:bf:89:d0:1a:88:af:e0:
21:3f:82:d7:1b:38:8d:c9:b1:17:c3:0d:e4:ee:9b:
30:c6:59:81:f8:bb:c6:95:f9:44:ed:23:8d:06:bc:
06:cc:37:dd:5c:34:2a:7c:47:34:29:0a:24:11:66:
ca:45:13:31:9a:e5:e1:7d:72:0a:ef:ca:6a:06:7c:
6c:49:70:31:d3:6b:3c:b9:09:e7:42:48:08:ec:9d:
bf:9d:a9:59:ba:f2:b4:e8:cd:38:ad:1f:b1:12:3a:
54:51:0e:bb:4e:0d:e3:36:7e:7b:e8:32:90:de:cb:
d2:ad:ee:b3:26:e1:88:81:c8:66:be:9f:8e:9a:7e:
f5:12:bd:7e:06:52:96:15:1e:49:1e:7e:ca:d7:bc:
84:c5:53:7e:e9:9e:c6:3a:de:2c:a2:a9:c3:c9:f1:
f9:07:b2:8f:1d:42:21:4e:e2:b3:99:8d:7e:56:0a:
ff:22:e4:b4:ba:3f:16:4a:3d:56:45:20:88:a5:37:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:DF:30:A6:F8:10:B1:76:25:31:CB:1B:2B:A4:D8:27:4C:1D:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4212ab29-fff7-3cf2-a6b0-214567bde27a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.161.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:c3:9d:2f:17:92:ce:8e:60:3a:d0:39:ea:5a:3f:b6:a9:be:
9a:48:5c:9b:2e:69:bd:30:04:cb:a6:13:5d:c6:3c:33:c7:6f:
2c:73:b4:58:59:5e:73:04:ea:db:9b:59:3a:c7:fb:0d:2e:3c:
4f:29:de:05:2a:4b:14:80:a6:53:53:81:76:63:a8:11:58:bd:
8f:f3:32:b5:e4:a9:ee:25:65:d1:00:a7:cf:51:bc:ad:46:97:
84:ca:48:24:1b:3a:db:45:c4:e5:40:2f:a1:74:90:cc:aa:27:
2d:b8:2a:a9:db:16:02:bd:f2:15:6f:02:0c:88:33:f2:0e:cc:
ce:fa:ad:20:0d:d6:1f:c0:fb:e4:e6:ed:84:86:52:25:db:cd:
9d:18:74:0b:65:06:e3:5a:6a:d3:03:c8:aa:09:83:f5:f4:42:
8a:39:2c:bf:bd:56:4d:9d:2d:98:3f:1b:26:09:73:40:28:48:
f4:a2:76:4b:94:b8:23:84:0e:d1:87:53:22:9d:9e:d2:48:ce:
95:3b:9e:72:25:6c:7b:b4:df:c2:60:02:26:0f:e5:f7:0b:27:
df:44:ef:47:67:c1:56:38:e2:a8:02:95:d9:8d:3f:a0:98:68:
47:14:d2:bc:db:12:3a:6c:6e:ce:aa:85:50:01:cd:bc:3a:d3:
17:cb:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:08 2025 by rpki-client