Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38ce678-d28e-3cfa-81ab-794f8b318f24.roa
File: c38ce678-d28e-3cfa-81ab-794f8b318f24.roa (raw, json)
Hash identifier: CaNgP2NFnOR879xM7W6XeScocEh8eNXS43QY4zMa0GU=
Subject key identifier: 67:CA:F5:A4:DB:20:5C:0E:D2:7C:1A:63:C0:7B:9D:F3:A6:98:B1:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70DB171AD0D211EDE2700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38ce678-d28e-3cfa-81ab-794f8b318f24.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.234.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0d:b1:71:ad:0d:21:1e:de:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=afdd3571-ebd4-4f5d-a6b9-c2005515c612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:dd:0f:3c:ea:ed:a5:db:2f:39:8a:54:04:
44:ca:91:2f:65:b6:c2:e9:db:a8:ea:97:85:78:ad:
e3:31:1a:5c:d8:2b:5a:c3:90:bc:e5:7a:c5:76:df:
5c:47:31:55:9e:17:05:e1:41:a6:09:ab:1d:58:75:
10:c2:80:ef:8a:07:fa:01:5c:80:10:ea:b2:02:da:
88:c0:2d:63:95:d1:d3:65:00:26:a5:36:a5:d1:f4:
ae:1c:7e:c3:10:c9:1d:71:32:59:3d:60:5f:c6:be:
6a:7d:d5:29:c1:88:6d:d3:2f:1e:5e:1a:31:2f:b6:
1f:ae:a8:95:0e:f6:f9:af:29:88:c7:a4:e9:1c:8d:
e4:ba:ef:bd:b0:b9:d3:50:90:12:56:9b:50:42:cf:
41:7b:60:bf:1d:db:cf:3c:5b:8b:77:37:f6:45:38:
d5:7f:89:5b:67:b7:30:d5:17:53:0e:ba:88:93:da:
46:eb:d0:a2:7b:7a:3f:08:8a:25:0f:60:8b:39:84:
9e:26:36:86:e8:16:10:0f:d9:7a:78:71:1e:8b:ad:
f5:87:f0:be:6a:d3:05:b4:7f:76:d6:90:65:c6:9c:
e7:0e:c4:04:cd:ff:f9:a2:f2:ed:e3:2f:90:83:8a:
61:dd:56:2f:72:cf:36:b7:f4:50:45:72:aa:39:d0:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:F5:A4:DB:20:5C:0E:D2:7C:1A:63:C0:7B:9D:F3:A6:98:B1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38ce678-d28e-3cfa-81ab-794f8b318f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.234.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a5:96:74:23:0d:67:ed:3b:13:9a:a6:1c:fd:88:8d:a7:2b:
c9:d1:b2:5f:1b:32:81:b3:cd:4b:24:5e:1a:03:ad:4d:9c:a1:
bb:4d:2d:bf:d5:b8:0a:82:65:9f:3b:21:f5:d4:cb:d6:3d:91:
19:cd:ae:c7:71:8a:4d:d5:0a:be:fd:43:7c:e6:90:de:10:f3:
cb:2c:3d:e0:25:12:72:11:b9:b0:fe:50:69:05:7c:63:d3:5f:
85:99:2b:17:03:01:2b:fb:0e:80:c5:3b:7b:94:a9:cc:66:68:
ea:25:b6:f4:56:2c:b2:24:b3:eb:a1:b9:9d:b4:dc:52:73:97:
50:7d:28:30:12:0b:78:0a:02:e1:08:59:01:7a:25:6f:7a:72:
99:7c:3d:d7:73:48:21:d9:6b:9d:f9:ac:24:3f:e7:38:6f:e2:
54:a5:48:24:fd:47:4c:fb:54:fb:7c:7b:9a:e5:d5:9e:2e:76:
1f:c4:26:a1:a0:12:83:03:1e:55:85:e6:19:10:01:ff:fc:26:
b9:6c:d9:0a:bb:27:1b:45:fb:b5:38:7a:a2:d8:ad:9c:d5:3a:
33:2e:04:59:59:76:42:e1:79:3b:48:79:99:b6:86:dd:a1:ad:
c5:d0:8f:d1:93:ad:9d:0b:54:62:ce:5b:11:7e:39:51:ee:e8:
aa:e0:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:46 2025 by rpki-client