Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5ece411-64cb-3ff3-a5dd-5162090dd2e1.roa
File: e5ece411-64cb-3ff3-a5dd-5162090dd2e1.roa (raw, json)
Hash identifier: UgETYHc5B0Zk5tMFnU809NDykjeeRF/zZoTxoC9ZH7Y=
Subject key identifier: 6E:BB:C9:12:21:95:72:7A:2E:47:F3:46:F0:D7:BE:D1:DD:18:77:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7D5F2516D97FC431C8640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5ece411-64cb-3ff3-a5dd-5162090dd2e1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 174.170.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:d5:f2:51:6d:97:fc:43:1c:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=8a8d2a63-0383-47d5-9f19-7301a7424cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:d5:5b:4f:90:4f:3b:39:0a:d2:99:db:c9:
24:73:d4:58:c8:b3:bd:55:93:19:23:5e:08:bc:cf:
34:f5:46:8e:6d:0a:ad:2c:44:55:f9:b7:c8:2b:7f:
d2:7e:db:b5:4f:98:19:04:ee:57:82:2b:42:cd:56:
2c:c1:87:e1:52:29:91:75:04:20:28:62:f0:49:98:
4f:77:38:ef:61:5b:42:55:16:ff:69:04:9d:04:ee:
da:31:2d:9d:cf:b7:36:d2:f9:1a:68:68:f2:6d:72:
c1:4a:75:02:ed:e4:9c:84:65:2b:41:74:34:bd:36:
1a:c4:af:d3:4c:6b:73:f3:1f:2e:c6:61:dd:4a:ba:
7b:b8:78:9c:77:a6:44:9f:9b:de:03:98:23:30:6d:
b5:60:4e:56:37:df:06:e3:03:ec:91:0d:8e:00:98:
85:81:ef:eb:1d:bc:51:c5:e1:a4:b8:20:d3:74:6a:
3f:79:05:b5:a8:a4:73:da:21:b8:64:72:cc:dd:9b:
7b:3a:5a:5c:33:38:ea:52:0e:63:8c:95:3e:97:c8:
95:64:37:c7:53:81:a8:2e:bb:86:d1:df:64:e0:ed:
a9:05:2e:f1:67:e3:99:f0:98:3a:76:04:97:5a:49:
45:e1:54:36:d6:0f:93:a7:d7:a9:8d:50:15:8a:36:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:C9:12:21:95:72:7A:2E:47:F3:46:F0:D7:BE:D1:DD:18:77:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5ece411-64cb-3ff3-a5dd-5162090dd2e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c8:9f:4b:b5:8d:af:58:c5:67:c6:c2:a1:94:3d:c6:57:5f:
11:aa:4d:7a:dd:df:c4:99:66:55:42:ce:ae:22:5f:ed:ed:f8:
cc:9e:08:49:84:24:cb:d3:94:80:44:86:17:e5:e0:15:47:a2:
ae:4a:00:3b:69:27:40:7d:f7:94:47:db:46:3e:5f:b6:42:01:
d0:36:29:77:b6:a4:d7:95:58:b4:20:d2:5f:93:5c:f0:a9:b2:
72:b6:b2:62:fe:d8:4b:7a:9a:1c:27:de:34:e0:c7:f0:26:ef:
97:e7:81:b6:4d:d6:54:22:fe:64:a9:52:e1:97:5e:ae:80:2e:
8a:68:b0:08:f7:b6:00:82:64:63:33:6f:2c:9b:31:ad:d4:4a:
99:fd:7d:a3:e1:20:29:ff:e0:a5:10:5b:f6:cc:12:a8:61:de:
25:24:09:e1:3b:07:98:15:79:4b:e9:24:22:c5:8b:ca:06:81:
79:80:8a:b0:92:fd:af:df:b4:3a:3e:33:4f:6b:79:e9:e1:5f:
a0:c9:39:4d:bf:75:ce:32:00:49:59:80:af:6f:0b:16:5b:0e:
fb:85:ac:7e:63:5c:70:ac:9f:f5:cd:b4:d4:ad:a3:82:8a:db:
fb:92:d1:0b:9e:0d:f5:ee:f7:58:5c:f1:a1:02:b7:df:54:9f:
69:83:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:22:35 2025 by rpki-client