Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f41cc696-66b9-347f-9654-298cc9cec77c.roa
File: f41cc696-66b9-347f-9654-298cc9cec77c.roa (raw, json)
Hash identifier: DBWutNkwfeI4or3rglc+e/2/9KXW/dlRkhR4kLcU7Mw=
Subject key identifier: 43:D5:9D:46:A1:93:61:2F:A7:65:26:98:E0:1E:6A:CD:B4:4D:D2:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70FDF48C31D9E9D9C8580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f41cc696-66b9-347f-9654-298cc9cec77c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.235.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0f:df:48:c3:1d:9e:9d:9c:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3a8b85b9-311d-48ca-93df-5c610c362746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:59:74:fb:23:55:19:49:30:b9:03:25:71:
25:ce:a2:2a:0a:ee:48:3a:0f:36:18:4a:35:48:b2:
c4:5a:c8:46:79:cf:03:88:a3:03:d7:53:e9:ef:24:
d0:8f:2a:88:df:ca:ec:48:c4:ed:55:f1:62:93:4f:
fe:0a:0e:1d:f5:0c:4b:af:56:10:91:6c:e2:a3:2c:
6f:00:1a:15:ed:fd:cd:92:66:85:86:db:a2:6c:56:
6b:e8:c7:46:bc:01:f6:1a:d5:f5:20:d3:2d:86:ee:
ea:bc:5d:47:6c:9a:d4:db:d1:42:22:aa:ff:9f:d8:
d3:15:2f:54:8b:47:54:31:30:95:d1:60:7b:79:28:
ba:e1:ae:33:be:d3:13:19:1d:11:24:37:a8:25:6b:
bb:f5:f7:da:29:39:17:15:15:d2:94:51:22:2b:46:
e6:b4:63:d3:b7:ea:0a:8f:9a:06:03:86:16:8e:69:
38:d3:ff:c9:e8:f0:31:cc:f8:1a:62:9e:e8:a4:15:
c6:34:2f:b1:93:07:71:da:6c:0b:14:b5:5a:a9:21:
3e:70:57:a5:65:b0:f9:b4:ac:f9:9d:b5:87:c6:44:
1c:7f:c7:e2:cf:42:db:79:dd:bf:04:af:08:2e:3c:
c2:c1:e6:2c:74:00:5a:bd:08:9f:a7:a8:6e:41:37:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D5:9D:46:A1:93:61:2F:A7:65:26:98:E0:1E:6A:CD:B4:4D:D2:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f41cc696-66b9-347f-9654-298cc9cec77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.235.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4c:06:de:cd:0d:21:26:72:b4:ef:43:7d:26:86:53:84:5e:
6f:c6:4c:d4:6a:d7:5b:93:04:c6:6b:03:dc:77:cf:63:7d:9b:
a3:fd:f7:cc:b8:b7:d5:20:3d:d6:c0:ef:46:a8:a9:2a:1f:ec:
22:a4:76:a9:3d:9e:d9:17:f8:fa:37:a0:6f:4e:4f:0f:4e:71:
65:10:9a:9e:67:ce:86:61:06:66:82:08:8f:a3:e5:04:43:8d:
41:c9:86:29:bf:fc:86:4c:2f:3d:ef:ee:ed:69:12:29:12:ed:
76:6c:8f:1a:5f:d9:a9:b6:82:78:7e:ad:2e:cc:f1:a3:3b:b7:
73:01:ef:1a:87:db:3f:39:5b:b0:dd:6f:64:4e:85:13:c4:7c:
4a:06:c5:1e:e7:8c:84:89:e6:aa:21:7a:3f:04:65:06:25:b5:
d0:f5:2e:1c:1b:d2:ac:28:68:47:65:8e:72:f7:4c:33:6b:fc:
1b:fa:17:bf:50:15:8e:21:f2:41:02:b7:37:29:a8:70:21:75:
2b:63:b8:d3:4b:96:de:b9:79:51:f8:44:87:74:63:60:b8:4b:
99:f0:d7:c8:78:09:35:fd:ca:39:76:9c:20:9f:5f:76:8b:8f:
99:58:66:69:be:41:c6:2d:36:c8:f0:8b:ed:1d:af:9b:dc:3b:
10:de:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:08 2025 by rpki-client