Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91ecdd7f-fb87-31a4-859d-7f154564dc47.roa
File: 91ecdd7f-fb87-31a4-859d-7f154564dc47.roa (raw, json)
Hash identifier: BbnJIwq75j6gsJ9dsg8H1jM/FQmNlKFXfDfQkEWfcqE=
Subject key identifier: 97:74:8A:1D:CE:BE:D4:C8:D9:21:EE:D7:A7:48:08:FA:4F:E0:32:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E3116C68D9F70BEB34B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91ecdd7f-fb87-31a4-859d-7f154564dc47.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7922
IP address blocks: 174.160.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:31:16:c6:8d:9f:70:be:b3:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=0da7f6c7-1291-48d0-92e1-fa0981b25a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:7a:49:67:8a:28:7d:4b:75:b3:7b:87:54:
0f:0f:a9:f0:42:d0:93:d6:39:f9:d0:fa:11:24:3a:
ae:9d:87:45:7c:82:86:4b:a4:de:84:91:9f:10:86:
9b:08:c8:98:48:c9:e7:28:cd:a4:c6:32:83:41:48:
42:7d:42:cb:9c:4d:3b:1c:60:f3:a1:43:aa:ad:f3:
0e:5a:40:bd:aa:2d:69:e5:2a:e3:23:6a:06:b5:6f:
8a:f4:d0:58:cf:c2:d9:b1:23:55:e2:ea:ed:e9:dc:
29:d3:aa:80:92:ac:90:60:1e:09:40:1b:5f:3f:ca:
ae:49:d1:cc:44:78:7c:ff:0d:48:da:c4:e4:94:e0:
26:40:c8:a2:67:f2:d8:64:0a:4b:1b:97:f2:8a:1f:
83:79:80:cc:08:8d:b4:36:93:96:66:c8:ab:7c:c7:
5a:50:e1:e9:50:96:6c:55:f5:c7:40:eb:31:f1:34:
5b:9b:b1:81:23:c6:92:ca:e5:c2:04:bb:40:5e:1b:
0a:5d:e6:47:6f:4f:28:b8:8e:56:cd:4c:e1:e4:e1:
a5:eb:0c:e1:04:6e:12:9a:29:66:3d:09:9a:9f:c1:
28:74:e0:cb:97:db:8a:00:9c:b6:9e:88:89:f2:49:
16:8f:5d:dc:35:1e:ed:63:cc:75:e1:91:75:e1:19:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:74:8A:1D:CE:BE:D4:C8:D9:21:EE:D7:A7:48:08:FA:4F:E0:32:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91ecdd7f-fb87-31a4-859d-7f154564dc47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.160.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a7:9f:6e:e0:c2:72:50:80:b8:0f:e1:aa:d2:bc:d8:b7:3f:
fc:ca:d0:28:f8:c0:dc:5d:ea:ca:71:4a:6b:3a:b5:cd:e8:fe:
67:ce:fa:d3:7b:a9:4d:c0:0f:86:ce:d9:db:d9:25:46:70:6c:
c6:95:d5:fe:d1:fb:17:87:d7:30:0d:8b:df:87:6b:8d:7c:89:
ac:25:69:e2:53:c0:ae:2e:af:f0:c5:05:1b:6c:ab:ec:cc:58:
be:b8:d1:4f:15:e6:d7:27:2e:94:47:3e:f9:80:2a:5d:35:67:
3e:d0:69:64:6d:a4:1b:6c:77:b8:88:4c:0f:e3:6a:be:da:7b:
11:51:dd:ef:24:5a:ea:a1:3b:22:83:a4:b2:64:fa:a8:a9:ee:
09:61:ee:0e:1c:cf:3a:02:1e:22:3a:e6:2b:ed:96:7f:55:9f:
6c:dc:26:a6:f4:d2:2e:cb:a0:1f:42:ee:47:52:19:db:91:d6:
c3:f6:68:cf:7e:74:bb:14:7b:4d:19:11:0c:8d:0a:32:23:d3:
57:6e:c4:40:44:ad:0e:fc:25:b6:f2:9e:61:29:2b:04:db:3d:
e4:88:dd:de:8a:7c:27:b6:5d:a8:8a:d8:c4:0b:7a:e2:30:84:
a5:b1:a7:ac:85:ba:6b:4c:11:22:bc:e7:38:93:75:76:da:7f:
30:23:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:30 2025 by rpki-client