Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9ce3310-6c8a-3aeb-ba13-93eaf66a1568.roa
File: a9ce3310-6c8a-3aeb-ba13-93eaf66a1568.roa (raw, json)
Hash identifier: TangS1KbaghxQhn8Peo1JMYUcSbbQd1I+MGRmR4jsEc=
Subject key identifier: 0D:87:E4:79:F8:2E:22:0B:F1:6E:7E:A5:47:05:00:24:7E:9F:57:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B8B4A7EB03EF8514FF424
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9ce3310-6c8a-3aeb-ba13-93eaf66a1568.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 71.228.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:8b:4a:7e:b0:3e:f8:51:4f:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f3220558-8bb1-4883-981a-5010ed7b60e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:2a:9e:02:9c:11:fc:02:2f:22:60:81:ac:
3a:9e:43:f0:09:d3:f8:d5:77:a9:bb:02:6e:c3:74:
20:95:05:34:b9:2c:ae:a6:7c:70:06:f3:fc:a0:ea:
d2:c4:e3:92:e2:8d:dc:81:03:9a:6e:6d:ab:7e:67:
5c:33:61:f9:25:e5:3a:25:b7:fa:21:d2:a6:f0:b8:
80:32:27:f5:9e:3d:04:67:73:c8:90:3e:63:55:e4:
db:1c:13:37:6a:91:f3:7f:fb:bb:da:2b:fc:04:da:
c5:b0:5d:ab:81:27:f0:c4:6a:f7:fc:a9:36:d8:63:
81:9f:bc:26:e9:02:f0:39:ce:20:d9:61:05:c8:40:
db:7e:45:eb:ef:5f:b3:e8:2a:56:e2:c2:8c:f8:98:
1e:f8:c9:14:9a:ce:7f:49:4a:4f:89:a3:16:fd:ab:
78:b7:7b:09:49:aa:c1:25:97:ea:bd:fc:ca:ac:0e:
71:eb:aa:cb:06:3d:72:1a:aa:f5:d0:f2:0e:43:f3:
b3:53:78:88:b7:30:dd:2e:35:01:d2:be:9b:46:6c:
b9:0c:c3:7e:42:ab:bd:c2:ac:70:fe:38:ef:1f:d9:
c3:04:dd:a0:40:99:b2:91:9c:96:01:5d:e0:47:0d:
5e:02:0b:91:50:ce:ba:2b:f8:20:81:88:8f:a4:ed:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:E4:79:F8:2E:22:0B:F1:6E:7E:A5:47:05:00:24:7E:9F:57:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9ce3310-6c8a-3aeb-ba13-93eaf66a1568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.228.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:3f:f7:21:a5:16:c8:5b:50:37:57:db:e6:55:71:af:85:68:
42:3f:be:c8:0d:1f:0b:c8:97:85:b8:51:a6:fa:45:3d:0c:11:
41:10:ef:8b:e3:b6:75:1f:4d:b9:4a:79:9b:d4:ab:98:f7:74:
26:9b:44:1a:b2:35:90:9a:67:d4:9c:dc:18:1b:07:f5:ec:e5:
e7:7f:4c:ea:f9:7c:db:a6:dc:ac:ca:af:68:35:15:1f:1b:3f:
8c:2b:77:27:d3:fa:3b:b7:8a:99:95:b5:26:65:45:77:37:be:
24:e7:50:39:65:d8:62:4c:39:69:64:f8:31:ff:45:8a:40:a9:
52:f5:b4:c2:14:e8:eb:0e:46:51:08:37:a6:c9:a3:10:02:d1:
6f:d3:ab:18:ff:23:75:a8:46:6f:33:6f:e3:27:15:fd:2e:24:
85:cf:d8:ce:88:5d:d3:81:5f:94:32:db:39:6e:28:fd:d3:02:
ca:93:68:63:dd:58:ec:28:0c:7f:28:9a:aa:e0:aa:27:85:9d:
3b:c4:43:15:5b:e6:73:40:11:f4:5a:95:87:39:bc:ea:71:6a:
5e:93:21:43:7d:a2:93:65:22:91:6d:2e:39:b3:a6:4a:dc:2e:
d6:cd:0d:3d:b6:74:32:9b:6d:32:72:16:07:35:fc:f0:83:f4:
7b:af:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:11 2025 by rpki-client