Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99d76eaf-8df5-303b-a1d3-49b113ef3026.roa
File: 99d76eaf-8df5-303b-a1d3-49b113ef3026.roa (raw, json)
Hash identifier: tG9in5ukPaZR3PjCxruQKidd7hv0n8Cj4NXzwZPVE/Y=
Subject key identifier: 48:93:FA:C1:D4:7B:BB:C2:8A:16:AD:64:0B:01:AC:AF:15:F2:9C:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6EFD2A2ADC52220DB800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99d76eaf-8df5-303b-a1d3-49b113ef3026.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7015
IP address blocks: 71.192.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:6e:fd:2a:2a:dc:52:22:0d:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=ca68ce66-2474-443b-8648-01f5707049c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:0a:20:40:99:fa:f4:86:f7:f6:69:42:5c:
d9:e5:1d:18:6e:eb:df:d5:7b:8d:a4:31:19:3b:b3:
2b:fb:3e:97:72:58:9f:64:ed:b9:e1:a7:92:5b:bd:
aa:86:a7:02:56:94:fb:69:a9:d5:3e:f7:af:a1:58:
64:61:10:ec:b9:62:bb:2e:0f:1b:ef:3f:7f:9c:72:
56:81:38:fd:22:a8:b2:66:1d:c2:b2:36:ef:a1:a8:
c0:31:2d:46:56:d1:2d:d2:ab:12:76:a2:7d:f1:43:
42:da:17:2b:a0:00:2b:0b:1f:b9:a3:e0:77:3c:99:
84:99:3d:87:75:5d:c3:e7:ec:4c:43:55:67:fe:ee:
46:72:78:64:b6:25:d2:b7:6c:e4:ed:18:d9:e8:9f:
b6:ce:00:04:54:e0:71:c2:56:44:27:5a:1a:15:7f:
02:72:30:f8:20:df:0f:c2:87:70:a5:3e:97:5b:ea:
3b:9f:73:2f:fe:c4:19:09:9b:07:ca:47:1b:dc:b3:
3f:1d:f1:62:87:3a:41:ab:ed:27:81:81:d8:0a:11:
39:13:3d:9c:e6:fe:3b:f4:82:d5:dc:c7:10:21:62:
50:2d:d2:7c:20:46:85:95:54:28:d9:61:e7:17:15:
7c:10:a3:ed:07:17:81:d5:38:d4:1a:76:5a:6a:19:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:FA:C1:D4:7B:BB:C2:8A:16:AD:64:0B:01:AC:AF:15:F2:9C:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99d76eaf-8df5-303b-a1d3-49b113ef3026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.192.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ec:2f:40:67:3d:d8:63:48:3a:82:d9:c0:ae:48:15:d0:ef:
fe:1e:10:62:0b:62:31:56:29:4e:a9:51:e5:43:af:5c:91:be:
eb:39:c6:e3:91:c0:06:36:0a:ac:89:54:59:8f:d9:7a:ca:3a:
44:83:43:92:c7:83:ef:a6:5c:a3:06:15:19:f8:48:7d:ce:29:
c8:f1:66:64:8d:7b:df:5b:21:3f:13:0f:62:c4:b3:3d:78:f7:
81:46:c6:74:f9:30:bc:1b:94:31:46:9a:19:cb:d7:78:b5:28:
9f:19:56:d3:0b:7d:5a:ab:9a:0f:4e:0e:13:98:bb:2b:73:10:
aa:3b:be:f2:b0:a3:f3:c3:19:38:10:ec:25:0f:06:8e:ab:cc:
81:fe:fd:01:33:f1:48:55:74:50:bb:13:35:9f:52:df:a2:48:
46:95:37:b3:95:95:ba:f8:d9:14:64:b6:ad:41:e5:0b:05:98:
c7:3a:ed:0f:29:b3:83:68:d1:76:d9:bf:b2:c6:4a:8c:7a:18:
59:43:6c:e9:74:83:82:0e:7d:91:93:09:bc:ac:98:61:c1:64:
b6:d8:08:10:43:63:3d:4c:47:85:66:a3:9d:62:6c:29:34:3c:
fb:6a:ad:a6:f8:4f:a7:2c:2e:66:a3:aa:f9:52:53:68:dc:84:
55:39:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:50:52 2025 by rpki-client