Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/defd1747-6c0d-33d0-993d-2fad0a9515ca.roa
File: defd1747-6c0d-33d0-993d-2fad0a9515ca.roa (raw, json)
Hash identifier: GdiKawV+/VtHYnC17EKOPBX9uzpl5Oe2JsssARrf16o=
Subject key identifier: AF:18:47:76:8E:1D:FA:C1:00:4D:C5:6B:BF:D7:2B:42:60:B8:80:EC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6BF06F53D9EEE72811400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/defd1747-6c0d-33d0-993d-2fad0a9515ca.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 71.238.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:bf:06:f5:3d:9e:ee:72:81:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=de571d49-2bed-474f-a09a-e3c6d860074c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:33:76:bc:bd:49:3d:b6:20:ef:0f:c3:95:
fa:46:a5:7c:f7:eb:4c:c8:1f:81:64:73:a0:69:1d:
52:e2:ca:2e:22:3e:b7:e8:6c:5b:c0:25:c9:7f:d0:
8d:fa:a7:a9:11:91:9d:9b:66:98:c1:97:7c:13:15:
5e:0a:0f:c2:39:7e:11:24:58:ca:a4:c6:ed:3a:8d:
5e:a0:51:e4:1b:af:5c:4c:a1:af:d4:cb:77:60:a4:
8c:16:3e:47:e2:7b:bb:2a:28:13:50:30:90:19:00:
f4:00:2c:19:93:21:5a:bc:37:bb:75:9a:d4:3a:6e:
97:c6:34:57:e2:8d:2c:53:a7:e4:3b:2c:04:2e:51:
4b:24:2e:3c:30:85:bd:5d:ff:35:17:e0:65:1e:8b:
be:d4:85:23:44:be:b5:2f:e4:80:f5:6d:9c:07:4c:
a4:3e:d2:fa:7c:39:17:29:0f:fa:f3:76:b6:a3:ea:
28:fe:62:52:af:e3:35:41:2f:6c:e0:c8:8f:3c:2b:
48:74:00:6b:11:37:af:dd:1a:f6:b6:f3:73:89:99:
b8:51:3b:a2:a8:d7:f5:3c:3d:73:da:0a:dc:40:7c:
39:c0:ff:37:29:d9:43:47:89:0c:fb:eb:d8:ab:ab:
e1:3a:85:1f:11:54:5a:9c:6c:ed:4d:2b:a4:18:2f:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:47:76:8E:1D:FA:C1:00:4D:C5:6B:BF:D7:2B:42:60:B8:80:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/defd1747-6c0d-33d0-993d-2fad0a9515ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.238.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:fe:8e:8c:c0:53:d7:73:ba:db:38:cc:4a:ae:b8:3a:d8:e6:
69:f8:28:5e:fc:49:63:da:f0:f0:35:a7:15:2a:c6:11:4e:db:
17:c8:cb:47:af:2c:f4:b0:b1:4c:da:c1:14:5e:a4:9d:42:5d:
da:25:e1:ea:87:7b:ea:f8:2e:1f:85:ad:e5:e4:fc:4e:73:95:
11:91:ab:7f:7c:61:bd:08:06:29:d8:fe:4d:c3:98:2a:90:1d:
e9:98:df:e9:3b:90:a9:34:4b:bc:47:ea:38:99:07:02:c3:f7:
5f:a6:c6:75:3e:df:92:9e:4e:9e:d5:b1:83:51:b4:e4:a5:9d:
d6:81:22:58:c9:81:e7:24:29:bf:37:3f:f0:e8:23:5c:87:fc:
90:a9:59:33:3c:80:17:fe:b2:28:37:ab:22:e1:06:1a:38:00:
0d:03:b8:9f:51:db:15:9f:6c:96:6b:d9:a5:1c:54:27:89:d4:
9b:67:60:fd:4c:63:44:9a:cd:7a:d7:d3:ba:6a:1c:fc:9c:12:
b2:84:e3:5c:e4:93:e7:42:3b:af:33:69:9a:bf:64:70:95:a1:
14:04:aa:93:fa:6e:7a:26:a6:30:e5:48:e1:3c:51:32:ca:a2:
21:a2:09:db:e3:20:e5:da:9d:05:e3:a3:bb:26:fe:30:09:91:
85:ed:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:07 2025 by rpki-client