Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8892d65c-bea3-3dee-8231-ab6cd40bcfb9.roa
File: 8892d65c-bea3-3dee-8231-ab6cd40bcfb9.roa (raw, json)
Hash identifier: 0skXhHBRneJNw+ejQQRzaCuJvUbIvBHQXVeaqPXRZGI=
Subject key identifier: B0:64:42:DB:A9:11:D7:42:8C:99:22:45:B1:78:A6:AC:3E:77:6C:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C78E017FE7048E1BFAB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8892d65c-bea3-3dee-8231-ab6cd40bcfb9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 173.167.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:78:e0:17:fe:70:48:e1:bf:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=38ebbd08-064c-4559-94d2-3c25a2b6e286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:a1:a5:f5:67:63:33:b1:0e:5a:4d:c9:ca:
63:a2:0b:5f:f4:54:b5:be:e4:25:44:74:2f:0f:4a:
d7:f2:e2:83:5e:60:04:63:8e:4b:21:97:1b:f7:6f:
b1:c9:7f:fe:0c:e5:e7:c4:40:04:1e:93:6a:03:8e:
22:4d:f1:36:39:52:ea:7b:7e:94:eb:0b:c4:3d:80:
66:20:0d:da:6a:16:81:6d:c0:08:66:37:bb:31:1a:
15:7d:77:af:ab:09:cb:85:94:91:b6:ee:a9:24:8a:
e3:7e:c1:db:2b:df:c9:7e:5a:08:57:9f:59:c3:b4:
17:c5:ef:cf:44:39:ae:47:27:ea:94:94:ae:ff:18:
01:49:4b:98:f9:29:bc:33:45:4b:54:e4:88:af:09:
d3:15:24:6f:ac:38:a3:56:9d:f5:46:7f:91:58:28:
ad:6b:58:4f:b2:12:b1:78:1e:e0:f6:ff:40:b3:77:
81:3b:16:85:37:29:b4:54:11:ad:fa:02:f4:26:e0:
d9:06:06:fc:5f:b9:ef:bb:8c:0e:2c:87:b3:17:64:
24:84:87:e3:aa:d2:5d:7e:4e:10:fa:3c:c5:fa:4d:
d5:a1:b4:5a:c5:6d:72:15:86:33:fa:d9:96:28:e9:
00:9b:d9:97:f6:19:28:99:c5:08:18:16:74:36:50:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:42:DB:A9:11:D7:42:8C:99:22:45:B1:78:A6:AC:3E:77:6C:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8892d65c-bea3-3dee-8231-ab6cd40bcfb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
173.167.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:53:39:df:b1:01:3e:f8:bd:b8:2b:37:03:75:67:f6:c5:a5:
8e:98:ba:f2:27:ef:bf:d1:de:e1:be:65:12:f1:8a:2e:30:a9:
bb:1c:ac:43:d7:dc:0b:db:51:f7:d9:4a:f5:c5:d4:d5:96:05:
90:3c:77:ac:c3:7a:89:88:c5:2a:b6:85:1c:9e:59:b0:e4:4b:
dc:dd:27:11:8b:b5:98:ed:ac:85:17:b8:18:3e:95:16:de:f0:
e7:4d:40:21:d1:9d:5c:9c:70:0e:91:3d:31:d5:ac:4a:b5:af:
27:27:9d:5f:8d:41:89:b7:06:ca:24:6d:d2:d3:fe:84:f0:aa:
26:20:ac:35:b8:93:2e:be:c9:03:3d:81:82:b0:22:d6:6a:73:
3c:e4:33:65:35:3d:96:7d:fb:dc:22:7e:0e:c1:c8:f2:b9:f3:
3f:fc:e3:b0:fb:1a:00:40:c0:76:5c:64:31:5b:6c:15:3e:97:
45:f6:eb:2b:ed:5c:50:28:be:cf:dd:17:26:f1:cc:b6:79:88:
63:bb:7d:1e:28:99:1f:dd:47:9e:f6:29:40:35:66:69:3d:6f:
18:f8:a8:93:5e:cc:50:a0:40:f7:44:d0:d4:3e:1d:8f:65:e0:
b8:43:b3:09:66:c3:f7:89:e0:e1:c4:16:d7:df:8d:05:30:09:
0e:09:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:43:59 2025 by rpki-client