Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/493ce429-4caa-3d06-9d10-c32e1f1e4744.roa
File: 493ce429-4caa-3d06-9d10-c32e1f1e4744.roa (raw, json)
Hash identifier: SG68LhVs6mMp24fauQpGLBcLn6zAvabgDIZ/s1x1O7c=
Subject key identifier: 2C:73:28:12:A5:70:98:71:62:A9:AD:3C:5A:0C:9B:CB:AC:5D:19:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70B53E76EE514DDF9BF70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/493ce429-4caa-3d06-9d10-c32e1f1e4744.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.232.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0b:53:e7:6e:e5:14:dd:f9:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=40b1d106-e9ce-4636-b3c8-8457c97641c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:a7:6c:4e:9f:f7:08:3b:6c:a7:a9:03:0f:
02:d8:5d:98:a9:61:3e:80:bd:01:8b:1e:9a:73:68:
e3:6e:33:8e:df:61:7b:be:56:70:48:63:f8:26:e7:
7d:e1:77:4f:1c:87:10:f4:97:18:24:05:10:ea:8c:
fe:ca:fe:7a:2b:1b:c4:ff:58:2e:d4:d6:12:08:51:
d1:ef:8d:63:5f:66:21:6c:5e:4b:08:12:0f:88:c0:
66:4d:da:9f:c8:a6:ad:0d:93:aa:3f:40:ba:ee:10:
a2:12:af:c0:55:4c:7a:a6:16:71:cd:1e:d7:71:8e:
ec:71:a2:db:8d:1f:fd:00:04:30:0c:74:92:fd:0e:
13:7d:e3:05:0c:13:41:14:31:80:29:d0:2c:ef:c8:
84:23:56:4e:ca:81:18:b9:7c:84:66:28:f6:39:cb:
7d:55:56:e4:a4:03:0e:98:38:99:53:9e:a5:18:ed:
84:fd:d8:d2:a2:90:c5:57:12:0b:c9:9c:13:fa:15:
fe:f4:86:52:ae:0b:a6:3e:2c:c2:45:bc:b4:d6:fb:
e1:b8:ac:a7:f5:45:b1:09:1a:92:3d:4f:11:ab:06:
2d:c4:a0:1e:4f:b8:81:17:a8:66:43:ed:7a:ff:7d:
72:71:9b:7a:d6:2f:71:4e:29:47:0e:7a:d9:c2:1e:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:28:12:A5:70:98:71:62:A9:AD:3C:5A:0C:9B:CB:AC:5D:19:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/493ce429-4caa-3d06-9d10-c32e1f1e4744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:91:60:fc:d9:c2:b7:52:6e:35:67:e9:25:6e:a2:ec:80:ca:
d1:1e:bd:9b:be:46:13:5d:c5:23:6f:6f:8d:fe:07:d7:cf:66:
e2:8a:48:67:cb:1b:19:0f:b2:b4:2e:ff:fa:11:8d:bd:09:d0:
84:2e:99:2b:eb:70:9f:b0:14:6f:b4:f1:0b:34:da:41:85:b4:
48:d4:80:83:c3:a5:64:48:45:94:b0:51:e8:77:7f:e0:f9:f3:
d7:4b:ec:d1:98:ff:29:b3:dd:16:c1:ef:31:ee:5d:b9:87:c4:
6f:22:14:c2:f0:fb:23:b9:aa:65:6e:77:d0:8f:a5:56:cb:34:
fa:44:08:3f:88:8c:7d:a1:31:2f:a3:8a:4a:d3:64:c0:ea:f7:
8f:bb:af:2f:c7:ee:62:39:7c:7b:38:68:03:5c:bd:93:17:b1:
84:f5:71:43:2e:88:60:d4:6e:85:43:7d:1d:44:8c:0a:0d:72:
c8:d9:a0:bf:cf:d1:73:89:87:d5:09:5c:5e:d8:7b:b9:cb:ec:
29:b3:8f:73:0b:bd:22:2c:8c:8c:1e:7e:a0:a7:89:eb:35:eb:
42:d9:07:1d:19:79:c2:7d:a2:d5:7f:0c:5f:5e:3b:98:c3:40:
07:dd:aa:a5:71:8a:3a:7f:5d:f1:84:b2:d4:45:28:04:5a:b8:
5e:b1:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:54 2025 by rpki-client