Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a236f28-5b26-333a-bfc4-919c4caabaab.roa
File: 8a236f28-5b26-333a-bfc4-919c4caabaab.roa (raw, json)
Hash identifier: uO0+ei8GQWyP/CknOBICNN6T8hphfBuczzesec7dv5s=
Subject key identifier: 2B:1E:DA:D4:03:3F:96:9A:3B:14:AE:E7:DF:9F:95:D3:D3:1C:2A:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70FB9540BE0AB8632CD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a236f28-5b26-333a-bfc4-919c4caabaab.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.235.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0f:b9:54:0b:e0:ab:86:32:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=36a54145-1ebb-4094-ae6c-9e4b4590cf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:a4:e4:c2:88:8b:04:6b:9a:8e:3e:94:08:
97:1d:00:a2:b0:e1:eb:58:8d:27:42:59:f1:b8:dc:
19:56:33:9b:f6:58:dd:a7:09:46:7e:18:81:d9:3a:
46:df:7c:f1:c8:af:33:1b:a9:43:a8:a8:4a:cf:45:
7c:55:c7:30:79:10:0f:a8:43:8a:17:db:62:88:3d:
f5:e4:fd:73:3b:ec:30:99:02:90:c2:35:31:30:6f:
fb:71:62:54:39:93:02:0a:12:59:05:f1:b8:8b:be:
cf:68:a3:d6:da:dd:2d:21:fa:32:9f:83:98:21:75:
72:9e:34:0e:82:20:a8:0b:dc:21:f3:b3:f0:d0:d4:
69:b9:84:47:4a:cc:33:81:07:e1:4f:1e:4c:8e:8d:
de:de:93:51:14:12:36:17:85:d3:df:99:0f:59:28:
09:04:39:fd:b2:29:b2:15:e8:6a:19:4d:a5:57:5d:
9d:4a:f9:96:68:4c:a0:6f:6f:40:a8:cf:ac:c9:56:
38:51:ef:c0:22:20:fb:af:39:ec:92:31:91:18:cb:
50:3a:0f:84:28:83:3f:0a:19:6c:12:d4:07:94:20:
d2:dd:fa:38:be:c4:28:5a:99:22:54:65:15:0e:23:
a2:da:05:54:57:59:00:bd:9f:63:9b:82:ba:93:bd:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:DA:D4:03:3F:96:9A:3B:14:AE:E7:DF:9F:95:D3:D3:1C:2A:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a236f28-5b26-333a-bfc4-919c4caabaab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.235.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ad:ac:7f:be:cd:a4:07:69:c4:d8:c4:4d:19:4c:a3:a9:0b:
7a:d5:69:7f:86:18:43:f1:3d:be:0b:79:4d:af:25:01:45:24:
5d:0d:a0:2a:02:23:6c:b8:dc:12:64:b6:81:65:5a:c6:03:f5:
b6:48:37:d0:22:25:00:a3:9b:b3:f4:da:3d:21:b2:7d:a1:0d:
6a:48:e1:fb:f2:94:d6:5c:4b:e5:4c:9c:61:b2:8a:ba:60:17:
3e:0e:05:71:9f:c3:b9:69:98:cf:8e:19:43:8b:f7:66:14:99:
b0:38:5d:5b:ad:06:89:85:0c:fd:2e:ff:e4:67:8d:6d:10:8c:
04:02:0c:a4:74:7e:77:bf:d3:cf:c3:ad:cc:09:cd:40:6f:ec:
fe:ed:f6:56:ca:f4:4c:4c:b0:69:23:9e:32:1a:21:1d:ac:49:
81:6b:f3:ab:3c:99:30:6c:2f:82:19:d8:88:40:f0:6f:06:7f:
54:c3:73:fe:55:f0:61:bd:7f:24:58:07:b0:16:51:c0:50:0d:
6d:d4:d2:52:ad:cf:c0:d5:4c:0f:9b:f9:29:78:e6:ee:b3:34:
ea:fe:b6:42:82:22:63:57:58:e3:b0:b5:85:be:67:c3:68:97:
52:2d:02:9b:0d:2d:9a:30:a9:52:14:52:3a:02:48:a0:7e:84:
e4:fe:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:24 2025 by rpki-client