Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e74b195-9491-304c-bbee-a4a97dc6ae11.roa
File: 8e74b195-9491-304c-bbee-a4a97dc6ae11.roa (raw, json)
Hash identifier: sy7vKeHPh9e0GJGnpIZq/exsE2cFpeFmCvH/l1ECs9c=
Subject key identifier: 47:C7:3F:2E:72:32:74:4E:32:C4:B2:55:CA:CE:66:48:DB:9A:3F:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD9BD30031532403432C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e74b195-9491-304c-bbee-a4a97dc6ae11.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 21508
IP address blocks: 71.63.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d9:bd:30:03:15:32:40:34:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9d2957bf-2f44-4c99-8515-0f1748f5ac68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:ef:15:71:99:54:a7:d0:ef:fa:22:d4:e5:
c2:30:80:b1:c8:4f:cd:e9:d1:99:7c:3c:b0:52:c3:
3c:4a:52:d4:a6:50:f6:ff:73:ee:48:a8:8e:c5:3c:
a0:fa:42:75:75:a2:67:c9:01:6c:08:13:53:02:ad:
64:b1:ec:44:b9:e6:c4:ed:5d:b9:b0:74:ac:bf:7d:
c1:f4:79:9c:06:52:fe:1c:8a:66:f1:f8:d2:f9:28:
00:17:e1:5e:04:43:56:88:d1:c8:d5:6d:cd:6b:d8:
6e:f2:0a:02:39:54:fb:a3:8a:5d:f2:8a:47:c7:bc:
61:f4:b3:55:5f:8e:7d:f3:43:93:93:4a:2e:d5:e0:
bf:46:3e:17:61:c1:44:7d:08:f1:a6:e2:cd:a4:4c:
e7:f8:46:c7:2b:f7:de:c4:68:78:d0:dd:ee:73:71:
1a:db:9c:a3:f4:a1:13:7c:53:89:84:ce:e2:cb:67:
d9:5b:95:ef:60:70:2d:c7:15:e3:a3:40:8b:24:35:
ae:26:39:79:31:64:79:20:87:14:9b:9e:a0:12:ad:
db:fa:21:3c:bc:0b:60:d9:a5:1d:7a:b5:c1:54:48:
2d:f1:1d:93:4e:f4:3d:62:07:4e:e4:aa:8d:6f:c5:
9d:19:bd:2d:01:2b:fb:be:dc:93:f2:81:a9:1d:04:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:3F:2E:72:32:74:4E:32:C4:B2:55:CA:CE:66:48:DB:9A:3F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e74b195-9491-304c-bbee-a4a97dc6ae11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.63.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a7:80:59:d6:6e:fe:95:44:aa:5e:a6:a1:0f:6b:ae:f0:8c:
3e:17:4b:94:86:22:8d:f9:fd:01:ae:6c:f4:d1:27:fb:e5:11:
bf:e5:8d:a0:f1:e1:34:92:d6:72:81:28:a3:b5:28:80:35:85:
b6:0c:f0:47:bb:44:a1:34:e0:71:4d:6b:4a:d7:0d:f6:61:ea:
17:c5:43:8c:23:04:89:af:3e:27:61:37:6d:8f:4b:9c:30:06:
dc:6d:22:12:82:ff:31:85:01:d4:c8:cc:c1:21:52:1a:d8:e6:
d4:06:9e:4e:df:32:a0:7a:10:5d:cc:d7:2d:da:d6:59:ac:86:
f3:1f:1f:03:f3:db:48:72:fc:a1:62:3b:9d:d9:ef:51:a2:b4:
85:2c:46:72:49:36:69:48:89:fc:a7:69:d5:3d:97:3c:f8:cf:
73:e0:9d:3c:94:f4:0b:5a:29:ad:1a:b0:5c:8e:0a:28:f8:1f:
c1:1b:2a:3d:ac:87:8c:e0:4a:5c:f3:d0:34:39:f5:fe:c9:95:
8d:fe:62:a0:23:dd:bf:82:09:15:b0:56:41:ef:48:03:d1:de:
aa:0d:4c:b1:32:26:89:01:22:4d:f5:d0:82:de:ae:48:b1:c1:
c3:0b:05:c1:11:35:08:0b:ec:99:e3:b0:c8:05:b3:4d:7b:77:
4e:53:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:23 2025 by rpki-client