Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/657239b5-8d6a-3d95-a252-732f37299d49.roa
File: 657239b5-8d6a-3d95-a252-732f37299d49.roa (raw, json)
Hash identifier: AB+rxHYm/rXGIMAFKxnYS1M2CMvH+7u2F04dfiClHZc=
Subject key identifier: D3:1B:8F:35:95:3D:98:7F:85:E8:EC:29:3A:7B:0B:BB:D8:D3:AE:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFEAAA3117385A036AF800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/657239b5-8d6a-3d95-a252-732f37299d49.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 67.188.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:ea:aa:31:17:38:5a:03:6a:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=314561e8-0912-42c7-9744-ea4a09b4e92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:d3:c9:c8:ec:0c:88:f2:db:89:6c:4a:63:
ee:24:37:0e:7d:dc:a3:71:2f:e8:b6:c4:79:56:61:
95:c0:44:8f:bf:d5:61:38:d8:df:6b:aa:52:81:c5:
4f:13:b2:9d:3f:47:69:2f:f3:cd:fd:03:a4:aa:28:
97:e6:77:10:21:53:8b:51:fd:d9:4a:7a:cb:b6:46:
22:15:08:8e:eb:2b:19:13:36:5c:52:be:ae:ae:09:
78:5d:c2:f0:f9:99:bd:b5:ed:23:6b:44:21:54:fc:
05:c5:ed:dc:be:cf:dd:bd:55:c7:bd:87:6a:12:98:
00:ce:1b:c3:85:27:d0:5d:f5:59:3f:d4:6a:eb:09:
5f:d8:99:fc:94:7c:41:c3:5d:b6:8f:f4:0d:79:db:
ad:7f:2c:d1:ba:34:73:76:ab:4c:44:2b:b7:4d:53:
16:84:f8:38:32:9c:33:1f:24:2c:1d:6d:4f:65:54:
28:27:7e:d6:c0:5c:a0:55:ff:7d:d2:1f:73:60:de:
21:f4:d8:c4:af:f3:57:5b:5f:08:cd:c4:03:06:93:
c6:9f:bc:cd:44:3c:60:89:3f:1e:f9:ae:1c:1d:6b:
ef:b1:03:b8:41:ce:4a:69:7c:cf:59:7c:1c:5d:17:
49:f1:55:0b:cd:84:be:17:9c:cd:38:2e:93:7d:05:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:8F:35:95:3D:98:7F:85:E8:EC:29:3A:7B:0B:BB:D8:D3:AE:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/657239b5-8d6a-3d95-a252-732f37299d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.188.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:03:6b:81:ff:3b:dd:2d:ed:ca:76:f1:81:5e:a1:d1:c0:65:
58:d2:05:fd:60:2b:66:82:e8:51:bb:ab:a1:df:b5:77:7f:f9:
c9:5b:a5:cc:86:67:2e:62:df:0d:96:cb:8e:1d:fe:68:2c:a9:
30:21:57:a3:1a:06:d5:fd:65:85:cc:40:18:2a:6e:51:62:e8:
76:db:e1:1c:33:0c:5f:39:bc:d9:9f:2b:90:ad:44:87:9d:35:
56:6a:c3:8f:4f:81:9e:5c:74:c7:eb:15:58:c5:02:69:d7:a1:
61:5d:15:4a:46:ee:5a:c9:e3:34:61:2c:dc:c5:b3:8b:fa:d8:
08:c8:bc:74:2d:bc:55:30:09:e2:a5:f8:fe:bb:9c:a5:c8:d5:
c6:29:35:ee:82:96:47:b2:20:1e:ce:51:7b:bd:19:ff:4f:c5:
43:2c:ee:92:63:c2:a4:66:10:b7:93:31:9b:1f:31:7b:a2:a9:
10:51:b8:53:34:bc:70:12:6c:94:fe:c7:5e:69:1d:ea:fd:02:
9d:f2:16:24:a8:73:6f:12:fb:b9:9c:f6:2f:37:12:62:0f:fa:
d9:d9:d2:de:2e:bd:82:22:b3:94:38:78:29:98:81:f5:ea:cf:
ee:13:e2:e3:1b:bd:df:c0:41:6f:13:68:47:5b:69:b1:89:a2:
fb:e0:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:12 2025 by rpki-client