Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c4b25f-bbbe-39a3-81c9-84c2770044f2.roa
File: f4c4b25f-bbbe-39a3-81c9-84c2770044f2.roa (raw, json)
Hash identifier: d8Ar/Fqu0xJoOtaaEqakqjnHviyrQQkf8eBuVNa9cW4=
Subject key identifier: F6:8E:06:5A:22:80:FF:46:87:2A:A5:16:12:92:B5:D9:A1:C1:B9:92
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF400AEB67FDF6E65713C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c4b25f-bbbe-39a3-81c9-84c2770044f2.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 67.186.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:40:0a:eb:67:fd:f6:e6:57:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=9927c4aa-7bb8-4b4d-9984-c2a347106d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bd:f4:8f:80:f4:9a:d6:93:53:f6:68:da:56:
0c:b4:da:f3:a8:12:e0:57:cb:7c:c0:93:19:b5:4b:
06:0e:5c:6d:88:8a:33:e3:39:c2:7c:9d:73:be:51:
5d:06:d1:c0:85:59:f2:ff:bc:10:e5:62:44:0f:c8:
4d:a2:3b:80:70:60:1a:e0:a3:45:e0:51:4b:b0:a4:
e7:d4:34:91:20:3d:14:7a:e6:fd:5d:b0:12:54:4a:
71:9b:66:6b:84:22:b9:08:d1:94:04:b9:7d:20:90:
a7:33:0e:51:63:b0:03:f4:d6:b6:b5:d6:af:26:75:
d7:6f:6f:a3:0c:4d:54:bc:07:64:29:2a:14:42:a0:
c4:33:88:e6:ec:12:0a:12:ae:aa:0e:52:e9:d9:b5:
bf:37:69:8f:7b:71:1f:45:7c:7e:09:90:2c:af:69:
c4:93:3c:55:56:65:38:75:40:d0:6b:35:54:10:6f:
ff:d3:d4:30:ab:09:a8:92:63:84:04:5d:c5:2e:34:
0e:b8:10:2a:3b:61:ea:f4:10:0f:4a:77:97:02:27:
f3:ff:47:21:a0:6b:dc:2c:1c:77:42:38:14:62:45:
70:78:97:d2:7c:93:27:89:0e:47:ad:76:78:24:39:
9e:4d:a3:0f:c2:c2:90:66:6f:ac:d9:99:f8:9f:81:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8E:06:5A:22:80:FF:46:87:2A:A5:16:12:92:B5:D9:A1:C1:B9:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c4b25f-bbbe-39a3-81c9-84c2770044f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.186.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:eb:16:8d:81:b6:f2:09:b5:17:3b:d8:fc:5c:6b:7d:e2:ba:
cd:80:78:c3:03:42:3b:c0:a8:50:1e:b0:f9:d8:a9:40:5b:07:
06:b8:43:28:a3:11:96:a8:e0:50:62:ea:1e:c4:55:23:69:45:
f6:29:4b:0a:c6:1e:63:13:b9:3a:c0:56:77:0a:05:02:0b:b1:
ad:f4:f5:16:9e:43:d4:e4:2d:a9:c9:c0:a6:07:fe:5a:57:c0:
16:28:43:c1:4d:2a:10:c3:22:f4:84:49:67:dc:fb:7a:99:e9:
b2:01:46:41:4e:89:9f:f6:47:97:a8:83:62:4f:3e:4e:03:6d:
46:16:98:ab:5f:ab:31:f7:0b:08:8e:59:88:90:9c:49:8b:4f:
ee:54:06:57:00:4d:a6:f4:d2:ff:cd:de:b8:b8:ff:be:07:ab:
ff:56:5d:0b:87:ea:77:7b:d1:fa:45:e0:5a:03:f7:a9:39:af:
99:f0:f5:79:4a:61:b4:1b:81:ff:61:78:d2:35:9d:91:7f:7e:
26:01:a6:36:dd:42:fb:99:ee:d7:9f:7b:5c:01:7f:18:8a:66:
d9:13:fd:24:1f:07:8c:ef:5a:9d:67:c5:49:9c:6c:9a:a3:a0:
d0:f9:3f:69:8f:a1:e3:54:c6:de:ac:85:2e:f0:8f:b4:8a:04:
9e:bc:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:52 2025 by rpki-client