Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82e184a-9d40-3d44-bfe6-e9b698073806.roa
File: a82e184a-9d40-3d44-bfe6-e9b698073806.roa (raw, json)
Hash identifier: gjrSEBYhVz7tFoFIPGfbQkHKo/7uS5Jm7OfMNGgnGa8=
Subject key identifier: CE:D8:95:3B:17:C2:98:0A:F2:57:B3:A5:5F:A3:DF:F6:D0:52:6E:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8CDC3E089FC8E7F1582C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82e184a-9d40-3d44-bfe6-e9b698073806.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 107.5.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:cd:c3:e0:89:fc:8e:7f:15:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=08b6cc54-c1dc-42ab-9950-da1adc29bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:ea:79:eb:be:c3:04:98:39:5b:a4:80:ce:
ba:aa:d4:cc:7f:6b:4a:87:eb:e6:24:a5:66:6e:35:
2a:56:be:bb:20:83:69:a9:44:17:ef:2e:5c:f8:4a:
57:3e:35:d5:b1:03:d3:be:78:51:54:c0:32:d0:71:
c2:67:7f:57:a9:2e:e0:02:00:d7:43:91:58:26:ae:
6c:85:fc:f4:82:a5:8b:37:3d:0f:94:2f:3e:e3:f4:
f9:95:96:7e:39:dc:c1:c2:e2:c7:a9:08:10:73:c0:
3b:43:36:e6:de:e2:3c:76:ab:e2:e4:3f:69:26:2e:
91:66:c9:50:70:72:28:62:cb:a1:7c:9f:6e:f9:f2:
ec:68:da:94:19:bb:94:6a:e4:5a:5c:60:a3:fe:8e:
72:fc:59:99:b2:dc:0d:23:e4:45:81:f3:c5:76:5a:
f5:97:4b:ec:0f:0e:31:22:1a:6f:0a:64:81:14:39:
57:6e:16:9f:51:d4:cc:7b:79:f7:80:72:63:77:e8:
f0:c4:3e:c2:c6:49:ea:db:3b:e1:d4:d9:5a:9e:dc:
e9:38:11:dc:c6:30:8e:6c:72:70:08:74:47:86:16:
33:84:25:ba:18:3f:54:3d:a7:bf:4e:9b:15:67:c8:
a7:b4:ae:bf:9d:a8:62:92:4c:00:5d:c0:d0:de:a1:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:95:3B:17:C2:98:0A:F2:57:B3:A5:5F:A3:DF:F6:D0:52:6E:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82e184a-9d40-3d44-bfe6-e9b698073806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.5.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:39:c8:a7:13:44:de:9e:5d:28:0e:ab:d4:b3:e0:51:4a:e5:
8b:7d:34:94:ff:c3:a0:19:8b:71:ea:d4:c5:4d:44:af:15:92:
e4:f7:95:9e:3e:4e:a1:94:d9:59:d0:45:8e:bd:c3:fc:db:2f:
42:f3:f6:a7:3b:a7:8b:b8:eb:bd:e8:f5:85:04:76:f0:5f:c5:
3d:38:52:85:8f:18:7b:bd:6e:cf:47:a9:1b:b5:74:11:cf:0b:
a8:bd:ae:ef:99:eb:5a:2d:53:3b:22:8b:6f:c5:a4:02:00:a1:
9f:1a:2a:12:79:5d:45:97:49:14:a4:22:0d:9f:9b:1e:41:ef:
f7:88:14:5d:d3:dd:55:00:70:c8:48:b6:9a:82:a4:2a:cb:fc:
60:33:cd:33:9c:b7:40:30:d1:3f:1d:f7:b0:e3:1b:58:53:c4:
5b:b0:e6:d4:ab:15:a2:6f:63:94:1e:83:9b:d8:59:dd:94:8c:
7f:a6:a9:d9:97:80:e6:0f:db:4b:73:e9:b5:42:5f:1f:97:d2:
ec:b8:80:c8:e0:d7:df:b0:38:e9:9d:e1:a1:cb:be:7a:c4:1d:
df:f8:86:bf:5b:4c:bd:c3:6f:91:60:29:0e:c1:ef:aa:50:ba:
e1:e5:e4:70:39:c7:e5:27:cc:80:8a:ef:ce:c0:45:e4:67:d4:
22:e8:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:34 2025 by rpki-client