Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af29d3b4-8144-3161-b631-f68d0c30621c.roa
File: af29d3b4-8144-3161-b631-f68d0c30621c.roa (raw, json)
Hash identifier: 1zwRSntOnikjUhUXzYdRnH76KgOuuaGDdsA2OSM2QQc=
Subject key identifier: 34:98:B0:A5:F7:4C:1A:11:85:6F:15:61:10:1E:E1:64:42:DB:A7:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB090A38281D1B6AFAE2F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af29d3b4-8144-3161-b631-f68d0c30621c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 69.253.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:90:a3:82:81:d1:b6:af:ae:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cdcaadc1-1695-438a-84ba-5f436934707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:80:59:eb:66:4f:6b:a4:a1:67:ca:6b:0c:
24:40:7e:5f:39:98:77:7f:51:98:d2:0b:76:b9:dc:
df:d5:dd:5d:d9:d2:e1:d5:1c:88:5f:63:0b:aa:4f:
42:4c:66:12:78:c7:b2:09:2e:b4:02:83:5c:33:f5:
7f:aa:b1:df:d5:bb:44:0f:37:0e:5b:e0:b1:09:f0:
d4:ae:8b:08:80:5d:d1:78:0e:47:27:15:ba:4d:9f:
d5:be:78:76:1c:99:f3:47:84:5d:bd:27:a4:1b:64:
37:f1:b3:25:5f:69:17:46:6f:3d:52:f6:ba:50:ba:
39:a1:a8:bc:0d:f7:d5:f4:0e:6a:a0:24:67:ec:6e:
1d:bc:87:2b:ad:78:bf:92:17:d6:a2:ee:ff:5f:78:
bf:bf:3c:f8:17:f9:72:f4:fc:3d:b3:93:21:b7:58:
12:8d:82:25:5c:05:b2:2d:71:d7:f0:24:8a:7a:7a:
9f:04:78:44:8a:04:57:85:5c:56:22:54:f7:22:7a:
e8:b6:97:70:93:ce:b3:ac:a3:43:ab:47:e2:9b:45:
dc:2c:10:8a:a4:3e:2b:65:7e:8c:2f:de:0b:e0:8a:
6c:23:89:07:1a:4a:5a:56:8b:8b:b4:73:65:88:0b:
23:07:a1:73:90:8a:07:ce:5b:0e:46:35:7e:ea:9a:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:B0:A5:F7:4C:1A:11:85:6F:15:61:10:1E:E1:64:42:DB:A7:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af29d3b4-8144-3161-b631-f68d0c30621c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.253.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:a4:78:54:24:04:db:e1:af:a5:33:60:09:e6:8e:b1:30:70:
25:9a:97:6f:c8:fe:83:1e:75:58:63:87:6e:c7:b5:8d:3c:64:
78:b9:e3:99:e4:c5:b8:b1:6f:29:93:60:72:2c:72:9e:8e:78:
f4:c0:d8:e4:04:b3:b2:b8:04:69:23:ad:ef:f4:a9:36:85:9a:
90:31:15:19:b7:4a:1c:9c:a3:92:24:45:f8:b4:0a:30:ce:ca:
80:b0:f9:0e:6d:e0:d7:28:fc:bf:a3:aa:47:20:4e:5a:e5:76:
7a:8d:c7:32:7a:6a:bd:30:13:13:f7:21:c9:84:be:9a:61:a8:
da:ea:69:f9:d7:ce:51:8c:2e:83:bf:c5:68:91:c5:cc:99:e3:
38:f6:2c:b8:0d:d7:fb:ff:4d:84:c1:16:e0:70:2d:71:12:15:
55:46:10:1c:3d:3a:2a:14:95:1d:7f:fe:6a:cf:05:6c:bc:62:
88:f7:fe:92:f9:3a:ec:52:41:2d:d3:36:5a:d6:96:23:85:92:
3d:2b:9d:db:5a:f4:cf:de:d1:30:c5:79:7b:eb:d9:89:1d:39:
40:62:22:02:f5:ec:04:61:15:31:ad:ee:8c:e3:7a:d7:c7:25:
69:5f:1a:2b:33:09:ae:b4:5b:4d:db:fa:6a:0b:14:9a:fc:2c:
1a:34:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:30 2025 by rpki-client