Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa
File: 844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa (raw, json)
Hash identifier: GePq07vSwMUjlqfOJMN3aqv/czuvjGMfhm1k6Y0ZvqI=
Subject key identifier: 11:B2:1C:D7:43:CF:61:08:EC:93:83:97:8B:91:A5:BB:34:E0:DC:62
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DDE722D7E25ACC7F7A0B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 71.27.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:de:72:2d:7e:25:ac:c7:f7:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=826fe6ae-0cce-49e2-9f5c-f4ab4923db99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:66:e6:58:ae:56:86:61:d5:9d:3c:7f:47:
e8:2d:18:85:46:0a:47:48:34:36:0f:b6:41:bf:61:
22:86:80:c6:b3:f5:4b:c3:48:10:bc:40:75:9e:f4:
ab:e2:af:e5:93:8e:8c:c3:05:4c:51:93:96:d4:f7:
05:b9:cb:9a:43:af:61:d8:18:60:f4:66:e3:d0:53:
8a:65:8e:d6:68:49:ff:ef:93:fa:77:41:e5:41:0d:
b5:3a:60:25:29:5d:c8:b8:99:d3:66:ed:ad:d8:7b:
34:9a:00:d7:92:b7:27:75:fa:91:dd:2d:a8:1a:c6:
f2:ac:ff:8e:1c:29:d6:2f:ef:b9:3b:a9:9d:b9:7e:
45:ba:c4:66:92:45:38:45:0f:54:22:15:a9:6f:62:
da:37:d9:79:cf:2a:da:5d:f9:17:19:10:55:16:03:
9d:f1:9c:43:9f:f7:a0:15:0c:3a:95:a2:3c:62:45:
43:42:71:29:93:a7:d2:a0:96:6a:ca:5d:77:c7:49:
d3:83:9a:99:65:4b:1c:d9:de:08:83:ca:62:7b:6f:
65:47:a2:b9:4a:b3:2d:7b:16:dd:4c:3f:f2:fc:85:
fb:47:c6:0e:f2:2c:17:0b:9f:77:59:db:76:58:6c:
f3:ae:00:76:d1:0d:8e:97:d8:38:41:45:38:b4:74:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:1C:D7:43:CF:61:08:EC:93:83:97:8B:91:A5:BB:34:E0:DC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.27.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:e5:38:b4:0e:c2:fe:cf:d1:6b:d7:7a:60:79:6d:ed:31:05:
7a:d7:7b:c9:0d:3c:74:a9:f7:1a:f5:73:86:cd:57:3b:84:9c:
af:25:66:f6:dc:89:b4:a7:ff:48:ed:70:44:4f:f0:d8:da:6e:
46:8f:0e:75:fc:60:d0:f7:22:81:d0:be:06:f2:de:55:83:7a:
ae:10:a2:cc:26:bb:63:42:66:d7:f3:bc:03:d3:95:4b:cb:18:
3e:0d:3c:ee:ad:45:a0:18:a9:d3:1d:1a:44:3d:b6:0e:e5:b9:
34:c8:66:20:2c:a1:48:74:b2:7a:c6:19:85:fd:89:74:9b:28:
46:41:b2:18:72:39:8e:da:36:6a:f2:0a:d2:b2:9b:dc:69:a8:
58:03:30:15:bd:eb:62:95:f6:97:73:86:2a:a6:49:4f:08:bb:
8a:d7:ba:2d:d5:20:7c:97:a9:9c:e4:c2:76:62:4c:2f:3d:9b:
66:43:1e:73:6a:e6:59:98:aa:0a:18:7c:a3:ce:cc:6d:33:e2:
e1:c0:71:f7:66:e1:d3:fd:41:f3:a5:7e:d2:5c:b4:0a:be:f8:
f6:19:d1:3f:a8:fe:e5:16:7a:25:5b:d0:b1:93:8e:84:4f:cf:
80:df:b1:9a:d4:5b:12:59:fe:a6:f8:38:36:83:14:45:0d:15:
1d:47:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:41 2025 by rpki-client