Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33f99b1-f3bc-3f00-9352-a05988602fa9.roa
File: d33f99b1-f3bc-3f00-9352-a05988602fa9.roa (raw, json)
Hash identifier: FkCD63Hw56nARtGj5KJSQBbmXxoSIV3DBiOJviahA8o=
Subject key identifier: 5F:80:F6:06:E9:A0:90:76:D1:A0:BA:47:2F:EA:EC:A4:40:6F:B5:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D55597EC7B4BD782D7E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33f99b1-f3bc-3f00-9352-a05988602fa9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33490
IP address blocks: 70.89.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:55:59:7e:c7:b4:bd:78:2d:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=44be6183-44dc-492c-9088-5ef2fc97ffb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:52:27:1c:24:48:2d:e2:e5:a6:28:c4:92:
0b:25:08:05:57:87:21:9d:d2:41:b7:10:9b:e6:75:
e0:31:55:fa:5b:89:b6:b5:ad:ee:b8:1d:a6:b4:f4:
ea:95:3e:67:28:10:97:6a:df:b1:db:d6:79:16:c7:
17:a0:91:13:67:d5:0e:be:87:04:d5:5a:a6:6f:24:
b8:04:6c:3c:4e:20:8b:e3:e6:0a:22:5e:8c:ab:57:
9f:1a:07:c3:0b:b7:a8:d9:f8:ae:48:91:61:6e:db:
90:98:7f:a0:1f:84:8c:bb:01:8b:42:3e:71:3d:cd:
f9:18:1e:ff:72:c0:ce:6b:11:ac:3f:7d:5f:65:18:
6e:d5:7b:95:47:f0:96:e6:b9:64:65:d7:55:43:30:
41:f5:9d:b9:0d:fe:71:22:fc:6f:0b:8c:83:a3:e5:
10:86:c9:80:41:df:1f:56:ff:ac:60:ec:74:2f:9d:
37:8d:97:53:06:7c:44:c3:c3:76:f3:34:ae:49:ce:
b2:45:c8:96:d1:28:06:59:d3:30:40:28:8d:49:16:
64:d3:a4:4e:8b:64:96:f6:fc:ad:a8:e7:29:dd:47:
cd:2d:ce:37:0e:11:2a:f2:2b:0b:a2:ab:46:f5:3d:
94:b1:aa:4b:99:7e:04:c3:35:11:d4:73:63:79:51:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:F6:06:E9:A0:90:76:D1:A0:BA:47:2F:EA:EC:A4:40:6F:B5:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33f99b1-f3bc-3f00-9352-a05988602fa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.89.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:98:25:db:c2:de:10:15:56:ea:07:61:db:3f:31:43:5d:2c:
b4:d1:1a:6b:b6:e4:68:81:3d:85:16:cd:6b:f4:7e:ba:42:a9:
bb:71:65:0d:5d:ad:2a:2a:d1:24:05:fd:87:65:98:9d:2a:44:
25:82:5e:61:4d:fa:2c:bb:bc:ec:c8:fd:fb:af:45:92:39:d5:
fe:53:13:97:ab:bb:9b:41:c2:15:cd:d7:92:47:83:dc:f1:ed:
d0:08:4a:59:49:05:45:e3:a3:e7:2e:f1:d5:77:c9:44:1f:f8:
9c:bd:14:4a:71:b0:fb:81:87:ca:d6:9b:2e:f4:ec:4d:e2:0c:
a6:c0:9d:e9:70:ff:64:66:8e:ad:4b:1a:c9:ad:cb:6f:b3:94:
94:bf:bb:e9:4e:1d:16:ad:18:0d:95:33:55:72:d8:ad:4e:9a:
68:ef:5c:f6:db:53:26:f7:fa:d6:b3:fa:85:d4:7b:ab:1d:58:
cf:aa:cc:4d:2d:c5:d5:98:c3:38:a6:09:01:d9:b4:20:f6:5f:
3b:37:ca:e9:60:67:85:a9:7c:19:cb:3f:9a:db:7e:58:3f:6d:
f3:8b:6a:52:b2:9f:eb:04:cd:a4:59:43:8c:d4:f9:22:e2:39:
06:7e:37:e4:03:ab:36:a4:55:07:3c:75:25:68:fb:99:57:93:
98:8a:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:47 2025 by rpki-client