Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598794a2-2081-353a-bdf4-8d906ce1e063.roa
File: 598794a2-2081-353a-bdf4-8d906ce1e063.roa (raw, json)
Hash identifier: tk10tVN6NNWaZm6+jP54iTk0ZWWc8Kls/G1QKB2ZpCQ=
Subject key identifier: AD:B0:7B:AC:F3:41:71:47:F7:A0:A7:52:F2:7C:06:AC:08:2E:73:56
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C0D70147D6CE756DECE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598794a2-2081-353a-bdf4-8d906ce1e063.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33660
IP address blocks: 67.171.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:0d:70:14:7d:6c:e7:56:de:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=dfe53836-7b88-4194-a7c2-170dc442d764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:01:9f:57:09:9b:de:bc:6b:d4:e9:f7:b6:
91:2e:c9:9d:47:fa:ed:f9:66:ce:21:56:b9:7a:b7:
4e:1a:2a:9b:e3:31:91:7a:86:fc:fa:d5:6c:d6:c0:
76:c3:fb:4c:20:e7:d1:68:98:d9:48:61:74:0d:1c:
e4:ea:12:fd:f0:65:ec:65:a0:91:63:b0:ea:b9:cb:
e6:ba:c4:42:69:e5:bf:c5:1e:12:5b:2e:b5:97:91:
87:41:46:5c:7c:12:a9:01:fd:9c:09:32:d2:b5:af:
fb:92:d6:e8:c6:e3:08:d1:37:f6:65:d9:56:ee:20:
92:1a:aa:00:66:93:75:ad:4b:4c:24:b7:05:f4:bb:
d1:99:ef:54:71:98:76:a7:18:16:f5:1f:fc:68:38:
ce:22:dd:fe:9e:1b:41:bd:a1:ab:cc:e3:ab:04:0e:
a6:4a:f4:33:11:05:3f:ff:66:b5:9e:87:d4:80:38:
a2:d0:10:b5:d2:2b:90:a6:d1:af:82:e8:d7:b3:94:
5f:e5:c3:2d:ac:80:25:e4:b2:d2:81:8d:92:7a:f5:
51:c6:29:9d:05:b2:40:09:97:d0:a5:3f:b7:a3:35:
d8:ab:21:ef:ab:43:26:d2:9a:e0:c3:c1:30:2b:ec:
12:b0:1b:a8:18:4d:c0:fc:bb:63:39:0b:2f:c3:b7:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B0:7B:AC:F3:41:71:47:F7:A0:A7:52:F2:7C:06:AC:08:2E:73:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598794a2-2081-353a-bdf4-8d906ce1e063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.171.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ad:36:c1:81:5d:4e:d0:c5:37:f6:23:f5:1c:ee:b8:25:d9:
fd:28:07:59:03:52:1d:38:e6:ea:e0:91:d6:2e:84:ac:fc:2a:
54:e8:48:a2:1a:99:bf:e8:47:da:f1:63:f2:0e:e7:e0:f4:a1:
bb:ca:f2:37:32:a8:d5:f9:37:a9:e5:a7:ad:d7:0b:5f:82:a1:
bb:39:05:20:e8:86:38:42:e8:e5:c1:0d:60:82:8e:bd:77:9c:
25:a2:f3:b7:95:f9:68:0e:29:7c:f0:30:ed:51:41:c8:ec:f1:
ea:d2:96:0e:37:9a:bb:c6:54:45:b2:88:32:90:83:ec:d4:5f:
85:59:62:0f:80:65:72:29:c7:c5:e4:31:0f:5a:10:49:38:e7:
d3:d3:8b:de:d2:5c:17:c3:6e:32:72:01:02:09:3a:05:6b:5e:
bf:04:c4:87:3d:35:8a:a1:bc:24:6e:68:3d:a5:b2:b8:c1:ad:
ed:01:59:ed:74:2d:81:4f:5f:f4:bf:f6:28:cf:c9:cc:12:da:
6c:c5:88:75:3e:4e:7d:53:26:9d:6a:87:78:54:53:2d:f6:45:
66:35:31:87:57:19:a0:91:91:aa:70:6b:c1:ee:6b:3f:0e:9b:
ec:7e:13:2b:04:63:62:7c:e6:86:bf:33:de:1d:78:13:22:29:
b7:c8:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:11:40 2025 by rpki-client