Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2051a64-bd35-3588-8d06-b5b6c973cd35.roa
File: a2051a64-bd35-3588-8d06-b5b6c973cd35.roa (raw, json)
Hash identifier: L1sz6Nayu39kWrGPv9YRIfZLS0bqyWjB256gXzZTqn8=
Subject key identifier: 94:6E:4A:00:00:08:47:91:95:D1:44:EC:53:2B:9A:26:7D:3F:63:68
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CC988B6B590BE7BB6C940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2051a64-bd35-3588-8d06-b5b6c973cd35.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7922
IP address blocks: 108.171.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:c9:88:b6:b5:90:be:7b:b6:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3e2d8808-9c7f-4464-b175-4a9ebd1926a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:50:38:2e:5b:5e:7e:54:21:16:94:32:38:
1a:1e:30:89:f8:b3:28:2a:5b:43:cd:11:47:f1:86:
9e:18:f3:98:bc:6f:e3:02:e7:00:54:9c:2e:b5:32:
e5:28:96:24:fe:51:c0:c5:90:a7:f8:57:84:fc:ce:
29:e8:1d:2e:5e:0b:f8:62:08:ac:8d:fa:98:30:89:
75:55:6f:13:84:d0:2b:db:11:ab:10:e1:28:48:6a:
91:5d:4b:43:25:32:a0:df:42:05:da:39:85:9f:c1:
e7:44:d5:a7:9b:f5:8e:75:26:bd:e9:3a:6a:9f:1c:
7e:ce:e1:4d:a0:3a:bf:8f:d5:cc:bd:36:78:ef:e9:
02:2e:dc:56:50:d1:62:d3:5a:d6:c8:01:7a:a7:2d:
6a:77:75:4e:1a:44:f0:9d:6c:b2:e4:0d:b8:26:b4:
ce:3b:a5:f2:dd:5f:74:06:d3:dd:9d:5d:ac:af:0a:
b1:7b:74:76:78:68:cb:44:82:06:70:d2:b1:d4:bc:
45:41:1d:c0:88:41:23:7e:3e:e6:fa:58:59:b4:95:
06:b0:26:e8:33:c7:a2:38:7e:63:54:aa:18:e0:35:
fc:84:04:13:f9:6d:51:2f:39:fc:94:ed:73:eb:12:
43:ee:46:4f:a4:51:ee:8a:5f:b4:91:c6:f8:10:c5:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:4A:00:00:08:47:91:95:D1:44:EC:53:2B:9A:26:7D:3F:63:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2051a64-bd35-3588-8d06-b5b6c973cd35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4a:85:3a:83:12:6b:5b:23:d6:2d:60:fc:c5:1e:f1:2a:c3:
5e:93:36:44:7b:bb:87:75:20:a2:50:f6:51:53:ba:3a:d1:c1:
f6:ea:51:05:6a:2a:92:fa:85:89:4c:93:18:21:94:c0:94:59:
e8:df:cd:1e:17:2b:b4:d9:8c:22:b6:9c:a9:d5:84:0f:a7:0e:
d8:5a:a3:94:68:be:8f:15:67:d9:33:10:3c:27:e6:70:a7:46:
61:8f:a4:0d:4c:0b:16:7a:5e:c8:4f:39:15:6e:52:1b:94:85:
9a:f7:ad:72:1a:77:ff:29:f6:ef:64:65:73:f7:d7:93:38:af:
24:e9:0a:2e:af:8c:aa:5b:4e:85:25:4d:9c:06:2c:59:30:8e:
1e:50:9a:5c:52:be:e3:c6:ec:33:a1:2f:d9:ca:1d:19:3b:44:
86:96:fa:80:e7:1c:23:8f:8d:f3:8a:52:e4:c3:51:ac:75:68:
56:63:70:43:70:43:8e:6a:90:92:04:0c:97:31:d6:7d:a7:f4:
43:2e:4e:34:43:2f:d4:8e:1f:a4:8f:64:c0:ff:b1:bd:c6:8e:
f8:00:6a:66:1f:3e:e0:5a:6b:b7:c6:f3:ac:5c:04:b1:4b:93:
55:59:df:78:21:4f:1c:b1:1d:3b:5c:b8:d8:e0:ca:be:e9:ae:
48:c6:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:28 2025 by rpki-client