Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613aa7c5-ceda-31a9-9a60-63dec1494ec4.roa
File: 613aa7c5-ceda-31a9-9a60-63dec1494ec4.roa (raw, json)
Hash identifier: 5lR+B4nr/XNDYW5yVitXfFdLmO2lPE1PNHH0Ag4C6EQ=
Subject key identifier: E5:D4:2B:7E:A5:31:C9:28:5A:C8:D7:80:DF:D2:67:BF:AB:95:A4:FD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB036A5E113B9917E452F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613aa7c5-ceda-31a9-9a60-63dec1494ec4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 67.177.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:36:a5:e1:13:b9:91:7e:45:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2d123b51-0d04-48f0-97f7-251a338d1637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:6e:14:f4:9a:63:cf:53:b0:46:97:8b:da:
44:09:36:51:14:c1:ec:1c:17:29:82:b0:f9:e3:59:
f3:58:96:13:8b:52:ee:70:86:24:0f:12:14:45:f0:
e3:f6:16:c1:1a:5d:7a:65:01:47:75:7f:f2:09:99:
d1:f2:36:26:81:47:f0:b0:ea:2e:2b:47:04:08:7a:
b8:a7:03:66:c2:47:c1:a3:5f:ad:de:1f:bc:19:f5:
ce:08:b0:9e:e8:e3:8b:5b:59:a9:66:06:d6:83:3d:
01:3a:2d:0f:8b:cb:ad:79:aa:01:18:61:2f:df:8a:
47:b9:79:02:5c:a6:e1:a7:1f:6d:76:0b:00:51:c6:
7e:56:2c:f2:3f:c1:c8:81:83:82:ae:7e:b3:f2:91:
35:7a:47:b9:8e:b2:7f:23:91:47:ed:42:86:85:56:
c9:7f:2f:b9:1d:b5:12:80:53:ec:55:05:c2:28:52:
07:ef:21:cf:f1:28:74:91:4b:b0:4c:dd:f6:28:47:
90:90:01:cc:95:93:26:79:fe:f9:29:39:99:be:c8:
c9:b5:a6:01:53:07:77:14:b6:58:be:cb:63:32:c6:
06:62:10:89:ed:a9:41:8f:e0:23:d6:4f:e7:de:d6:
9c:70:2b:fb:c6:9f:e6:f5:02:06:60:62:46:81:8e:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D4:2B:7E:A5:31:C9:28:5A:C8:D7:80:DF:D2:67:BF:AB:95:A4:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613aa7c5-ceda-31a9-9a60-63dec1494ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.177.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:06:ee:23:a1:6a:bc:ea:0d:63:ed:68:20:ad:ed:16:ba:8c:
ce:4d:33:88:27:0a:3b:e2:c4:fa:82:ee:16:3a:27:a1:02:bf:
59:c5:b1:da:18:e2:3b:20:27:fa:9a:47:7d:a1:97:5a:06:ba:
00:82:3e:0f:a0:81:cc:3b:76:29:e8:b6:1f:45:fd:42:7f:e2:
be:06:47:50:cc:69:92:79:c0:38:a1:04:33:d1:ef:0e:8a:99:
30:c9:97:d7:de:d9:19:46:ad:0e:18:a4:3d:93:c5:bd:33:65:
45:9b:df:99:a4:4a:ec:ce:d8:90:ef:f9:2d:b7:29:74:a4:8a:
3f:db:1c:1e:40:2a:63:81:2c:bc:9a:a0:18:ba:f7:5f:21:5d:
a8:8f:62:5f:09:d5:f3:56:ba:65:77:7c:27:62:e0:3e:6a:fe:
2f:1f:3e:e0:15:d4:dd:5a:de:30:19:e7:fa:07:04:db:7c:a8:
1f:36:97:87:f6:20:b4:96:41:3a:97:00:78:e6:4e:a3:c5:31:
c7:c9:c3:7d:fd:69:57:ff:bb:98:bd:11:a6:b7:c7:11:47:b2:
da:a7:bd:d9:ae:99:8e:06:fe:f4:71:fb:0f:79:55:59:b4:c9:
b1:6a:db:be:10:4a:a9:29:8c:14:7b:55:d9:3e:7c:b9:73:2a:
84:8d:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:46:50 2025 by rpki-client