Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea6bef29-a9c9-3511-a3d1-28f3c0fba211.roa
File: ea6bef29-a9c9-3511-a3d1-28f3c0fba211.roa (raw, json)
Hash identifier: 4Vwuabi0TCyXVYWidEnjlJp+neqVH0n+UBGa4JqiO2U=
Subject key identifier: 3D:E7:EF:9A:29:23:6D:49:9E:1E:73:E9:9C:CB:59:8C:AA:E0:5D:2C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C1BB453ECFC6D77578500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea6bef29-a9c9-3511-a3d1-28f3c0fba211.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 174.163.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:1b:b4:53:ec:fc:6d:77:57:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=3046d309-2fa1-4c48-b69d-92affc66506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:c4:a1:39:00:f8:a5:57:d9:30:f6:5e:37:
d5:e8:fc:ab:8d:ed:c1:d7:ee:77:0d:26:25:93:98:
a0:ca:9b:c6:f5:21:45:3c:30:64:8c:b9:c7:67:6b:
04:0d:7a:ce:c4:41:17:89:fe:0b:7e:e5:c6:8a:2a:
8a:aa:6f:c6:4f:6d:e6:eb:35:b8:aa:95:95:6d:2d:
2e:69:a2:30:0e:a5:e7:d4:0b:87:c6:e1:b3:6d:f8:
fb:25:b2:63:89:cd:56:18:42:ae:93:f1:77:04:1d:
3c:db:0f:a5:44:cb:3f:17:12:df:5b:d8:86:27:33:
f3:30:d5:1e:87:1f:fd:95:36:e0:84:21:c3:41:04:
ad:eb:2e:6c:e4:9b:35:28:2b:fd:97:35:71:a8:17:
67:46:5e:8f:22:e5:37:53:31:34:52:f0:39:28:cc:
db:2e:da:84:7e:39:9d:e1:f1:59:c9:ec:ac:95:56:
fb:d0:67:ac:2f:f0:53:59:db:42:5b:e6:9d:ec:b7:
91:88:c1:f9:3b:5a:39:a7:cd:fa:f2:e9:dd:51:fa:
12:dc:db:fd:be:84:a7:25:28:df:cc:7d:cd:20:43:
27:cd:b2:12:ce:d0:9c:c5:6b:03:1a:27:07:a6:6e:
9c:1e:6f:00:10:d7:38:07:c3:b2:0e:c5:58:a3:99:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:EF:9A:29:23:6D:49:9E:1E:73:E9:9C:CB:59:8C:AA:E0:5D:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea6bef29-a9c9-3511-a3d1-28f3c0fba211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.163.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f3:e4:23:2b:f6:c1:4d:e0:30:c0:fc:6f:08:87:7f:67:ef:
a9:ef:f6:65:b5:e1:fa:40:8d:7e:b2:31:d9:78:ca:1b:3e:e5:
86:9c:04:99:09:ab:e3:c1:70:41:c5:05:e8:24:1a:88:b7:e3:
60:a6:61:67:c0:1f:b6:fa:7e:41:a4:f8:8a:14:a3:f2:78:c6:
07:c3:35:3d:65:c9:9a:71:eb:3b:36:56:81:10:bf:a1:5b:6e:
aa:c1:cf:b4:87:d3:8e:25:1f:4a:0d:43:aa:85:66:29:0b:75:
9e:6c:a6:7b:dc:e8:e9:42:af:7a:38:08:8e:86:c1:d5:52:de:
ef:9f:fb:50:ee:8b:f5:a7:e0:24:e4:9d:97:f4:20:6a:6a:65:
39:b1:e9:b7:eb:84:81:80:4d:f4:d5:ee:4a:7f:0a:80:98:96:
f4:d0:1a:d6:d1:72:e2:f9:14:fc:b4:d6:d8:56:e2:d7:7e:e1:
b3:9c:63:0f:04:23:39:33:4a:c6:fe:b0:26:25:a6:19:11:72:
08:e2:bd:3d:88:fb:49:e4:10:55:3c:c4:63:16:9d:3b:91:ae:
41:ee:9a:f0:23:b9:1f:86:7e:e9:be:00:cf:0d:28:d1:01:0f:
14:ca:2a:74:0a:e5:7b:d6:2a:dc:b3:16:0d:5f:d0:85:9c:44:
f7:b6:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:50 2025 by rpki-client