Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2b3a44-b657-3fe0-b866-46d4e5e8d61f.roa
File: 5d2b3a44-b657-3fe0-b866-46d4e5e8d61f.roa (raw, json)
Hash identifier: DjvPtfhHEpqn19/vbCkyPBzCvQfJT7gigI/A7wyLfn8=
Subject key identifier: 5B:BA:F7:55:FC:B1:C7:F6:77:5C:AA:E5:A6:05:F6:B8:9B:65:26:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D4E57AE2776796A6DD080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2b3a44-b657-3fe0-b866-46d4e5e8d61f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33489
IP address blocks: 70.88.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:4e:57:ae:27:76:79:6a:6d:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=e05847c4-b275-4ce3-b475-cd751cadfd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:a6:72:bb:8e:69:10:17:0b:cf:53:b9:45:
eb:5c:1d:e8:35:23:25:24:70:4b:42:e2:27:a1:49:
dc:72:7f:0e:65:01:8a:6a:28:a3:6e:72:86:b0:43:
f6:81:a8:4d:61:a7:58:77:b6:7c:d1:aa:24:72:1a:
0f:23:6c:f7:b3:67:ae:07:d8:c0:f9:92:88:db:c7:
d6:4e:25:23:c7:fd:20:4f:76:53:64:02:0c:2c:1f:
22:2e:78:17:4e:b4:b9:6c:b3:63:f1:1b:85:3d:fe:
37:19:12:ee:06:e9:d5:49:da:c3:65:32:df:25:81:
1f:84:8d:70:d9:9b:20:28:15:bb:a8:0e:ad:36:dc:
dc:d8:a6:31:b4:88:26:85:d8:7d:0f:fe:da:85:88:
88:b1:f3:f1:ec:ed:21:2f:52:99:4f:64:5d:58:bc:
a1:43:7e:65:00:cf:9e:0c:c0:7d:1f:0e:0b:d3:6f:
df:88:f9:da:00:ec:ee:07:d3:80:db:d3:9f:82:b4:
07:10:3b:18:76:d8:65:2f:3c:3b:18:f6:11:af:38:
a4:43:cf:e0:d9:1c:2c:80:39:0c:cb:b7:b6:56:a7:
f4:43:53:25:0a:9e:01:ea:4b:34:ab:b0:a1:f0:05:
61:d4:c2:58:3d:c0:4c:f2:e6:6d:5a:40:29:59:ae:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:F7:55:FC:B1:C7:F6:77:5C:AA:E5:A6:05:F6:B8:9B:65:26:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2b3a44-b657-3fe0-b866-46d4e5e8d61f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:2e:aa:72:d6:9f:6e:32:15:01:76:a0:48:dd:70:0c:c4:f9:
e1:f8:8d:90:2f:85:22:df:66:5e:86:2a:fd:23:20:9a:ec:fd:
a1:eb:3d:01:2e:a6:bc:4c:9f:f0:49:37:ee:07:1b:5e:ef:2f:
74:f0:3c:12:f4:f7:df:14:95:4c:4a:ce:03:c3:29:0a:1a:d8:
a0:19:91:9a:b7:ba:ea:a4:58:16:58:84:01:1d:e6:6d:3b:be:
84:fb:45:43:7c:32:d6:e8:f0:10:b4:43:57:bb:56:f2:ee:85:
f8:ca:7a:9d:1f:59:9e:95:22:61:ea:3e:0f:01:61:c5:ae:e0:
59:87:86:15:49:4c:cf:b1:4b:6b:2e:ba:0f:b2:8d:09:28:d7:
00:3b:e5:a8:ea:4c:e9:c6:da:2b:04:86:13:0d:f4:1e:60:23:
74:0d:00:6f:2b:24:b7:59:aa:6a:2e:7f:b3:de:8c:83:d3:57:
df:42:89:a7:ff:d0:82:df:e9:a7:f9:d9:dd:29:e8:0c:bb:75:
66:51:a3:e0:0d:40:e2:fb:e8:18:9c:0d:a9:2e:7c:86:5a:d5:
95:1c:7b:b1:88:83:82:c3:b8:59:c2:b8:e4:a9:28:9e:6f:4a:
42:7e:7f:19:18:ed:c4:c3:54:61:7e:6a:e6:0b:16:ad:7a:2a:
94:91:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:17 2025 by rpki-client