Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8dd9dcf-8007-3b43-8196-878d03546402.roa
File: d8dd9dcf-8007-3b43-8196-878d03546402.roa (raw, json)
Hash identifier: PbhWz2fcLndUHpcUqsPFA8l6yYBNOdw9Gfnno2D0YsA=
Subject key identifier: 28:43:BB:42:53:E0:11:66:5C:BF:30:B1:FB:B4:87:ED:FC:47:40:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70D8E32A6182B4ED87F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8dd9dcf-8007-3b43-8196-878d03546402.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.234.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0d:8e:32:a6:18:2b:4e:d8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=680dac78-4ae2-471c-ad27-1b9204110fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:49:5c:eb:16:31:37:f8:ea:d5:c7:44:9d:
7d:18:f0:ad:2c:28:40:82:5c:ae:1f:cc:ef:8f:99:
4c:9c:44:05:3c:cc:c9:46:67:2e:f1:da:ec:ee:80:
58:32:75:33:b0:1e:af:60:4a:f5:4a:51:97:32:92:
c7:81:8f:0d:4a:04:48:b1:e2:a8:bf:55:2a:6f:04:
cf:37:cf:e1:ac:3e:81:d6:11:a1:9c:0f:b5:79:e7:
48:b5:74:8f:72:66:00:c9:e5:c6:9d:49:63:06:b8:
9e:40:ff:63:08:f9:92:b4:a9:36:92:c3:da:98:c9:
df:eb:b2:ea:64:8f:9d:78:21:19:af:ab:b7:22:9f:
5b:4b:cc:9c:69:81:bf:45:9e:7d:71:c5:ee:9c:b9:
43:d7:a2:b0:0e:dc:a0:73:28:51:1d:0f:01:a6:5d:
a6:a9:fb:a5:0f:28:cd:4b:e6:96:40:77:89:49:38:
19:fa:96:b3:83:7f:d1:7e:24:5f:f8:f9:e6:66:f0:
da:ad:95:69:c2:03:ae:22:0c:47:65:19:0c:69:38:
ca:2f:0e:d7:62:f4:7c:96:6f:43:38:1e:ad:b9:95:
88:db:50:ef:3d:63:80:9c:a3:b5:d3:89:3d:e8:4b:
58:a3:f8:c1:47:ab:b0:50:35:4d:d5:a1:00:00:10:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:BB:42:53:E0:11:66:5C:BF:30:B1:FB:B4:87:ED:FC:47:40:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8dd9dcf-8007-3b43-8196-878d03546402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.234.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:56:d5:d9:5c:55:74:04:da:8c:6c:99:94:07:32:9e:1b:0c:
b4:67:04:13:5b:2a:57:fe:08:b6:5d:5f:81:44:c2:7e:f5:1c:
6a:79:2b:ab:be:41:55:84:f3:11:ab:89:3c:b6:5e:7a:cd:e0:
d8:43:bf:db:e7:5c:93:87:5c:10:8a:07:04:92:89:26:48:4e:
06:67:af:6f:ad:bf:c5:34:88:8e:7f:c1:6b:74:1c:86:3a:d3:
e8:f1:55:02:37:02:4e:b7:88:25:96:e2:62:c7:6f:0c:59:4d:
5b:de:c0:a7:4e:3e:31:c2:8f:d3:c6:70:59:a1:f8:db:40:30:
4d:1d:b8:74:a5:37:66:f9:76:2b:dc:dd:c3:7a:2a:e9:bf:e6:
01:d3:6b:bd:b1:e8:d9:f7:29:f1:c1:b2:87:12:9f:6e:da:26:
76:ec:b7:c4:09:87:42:5c:5c:11:c4:82:86:fe:0c:8b:cf:20:
26:eb:84:43:03:53:9e:be:69:7d:f7:f0:cc:b9:43:48:e6:ed:
62:64:8a:9d:84:cb:87:c4:5e:40:ee:61:6b:a5:5c:05:86:d0:
2c:f2:e9:93:b2:51:78:87:39:8a:65:32:b5:93:ff:11:1d:6b:
c8:f2:66:ef:91:85:8d:9f:61:ea:70:1b:da:33:ab:32:f0:52:
36:5f:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:16 2025 by rpki-client