Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aade248-a853-3bbc-8833-b0adf360c110.roa
File: 9aade248-a853-3bbc-8833-b0adf360c110.roa (raw, json)
Hash identifier: +k5WZgUAhaxFLKGLunNWXsnVITpnzZtObDY1EMWnOkk=
Subject key identifier: B8:B1:55:69:0D:4C:9E:2D:1B:BB:60:0A:8D:0E:AA:43:20:5E:F1:56
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D2EBEFF731E687EB89B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aade248-a853-3bbc-8833-b0adf360c110.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 71.236.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:2e:be:ff:73:1e:68:7e:b8:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6799ad23-48c8-45f8-8dae-580763da7c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:d8:e1:85:88:d1:c6:a9:f1:6e:b8:5a:15:
51:98:09:f4:c7:fb:a6:07:a4:05:01:73:b6:ca:cb:
50:dd:45:24:50:1c:c4:c4:2b:2f:d2:48:16:5a:38:
db:6d:10:a5:01:14:d8:50:25:e9:da:00:44:f8:7b:
a0:a3:6b:29:42:bd:86:86:2a:b9:45:df:31:1e:19:
86:50:85:86:12:5b:a2:04:d0:0e:24:3a:9c:06:ad:
28:05:13:c4:66:d3:f5:54:85:da:f0:fa:cb:c4:66:
21:6b:42:fd:75:57:89:31:4b:11:ce:65:e0:74:6b:
ca:36:7f:41:04:ea:82:e1:21:bf:bf:fd:d1:e6:f4:
6f:43:c0:02:5e:88:74:be:58:47:6c:5d:92:e8:cb:
3a:93:df:53:31:06:f7:6c:ae:54:30:1c:fe:ef:01:
0e:83:fc:c2:d1:9f:7a:53:6c:d9:7d:b4:85:32:ef:
d4:1a:1a:93:03:bc:e1:aa:a1:e6:10:e7:4a:07:0c:
8d:91:62:20:06:44:09:35:17:5b:57:95:3f:90:3d:
18:06:32:bc:a5:57:5f:ab:10:c9:5b:42:91:a1:3f:
12:1f:71:a3:27:a7:fa:af:98:0c:9f:16:c6:14:a2:
ec:7c:36:56:0a:0a:24:e1:2e:b0:92:e6:65:25:68:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B1:55:69:0D:4C:9E:2D:1B:BB:60:0A:8D:0E:AA:43:20:5E:F1:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aade248-a853-3bbc-8833-b0adf360c110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.236.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c3:c2:27:7d:bb:51:fe:2d:99:e5:36:15:ff:df:f2:37:eb:
74:47:47:3f:1f:df:05:eb:dd:2b:23:7c:cb:fd:fa:20:ee:b6:
88:ab:cc:a4:5b:b8:0d:bb:f1:97:41:5d:f9:f2:05:0b:d7:42:
21:f7:d5:c8:09:19:2b:7f:40:a4:4a:9a:a9:89:db:6f:24:49:
e0:b5:00:73:2c:f5:12:35:b4:18:dc:51:d6:ba:33:0e:34:7f:
d6:c6:25:b2:f5:79:1d:30:87:f5:23:a1:f3:c0:07:96:27:77:
97:92:65:86:50:05:5d:84:0e:0e:07:c5:e1:ab:71:00:b6:c5:
27:7e:af:d7:e5:77:ae:63:49:99:e3:9f:2d:ca:19:47:9c:77:
41:ce:e3:74:a8:6e:d3:02:f5:d8:f3:cb:62:dc:f9:12:f4:80:
34:46:ec:0c:56:84:0f:79:18:88:8c:96:f9:b6:94:8b:95:63:
f3:b4:2a:e4:f6:9f:a0:80:59:68:37:81:e9:cb:b8:ec:59:84:
5a:16:5b:f1:8c:ef:81:14:93:eb:05:4f:4d:78:d0:dd:0f:f7:
d6:06:73:36:fb:5a:54:55:11:fc:e7:b3:f3:9c:84:b5:d6:45:
32:eb:4b:2f:34:18:d2:ab:eb:cf:ed:36:14:bc:83:2c:e6:2b:
b3:da:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:46 2025 by rpki-client