Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa
File: a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa (raw, json)
Hash identifier: w0Qi8X/0uI2hShmTqIwz0k8o6y4/qmiqdqnoiFRFQzY=
Subject key identifier: A5:95:42:89:9B:EC:34:32:4A:DD:FA:AF:E0:FE:F6:E4:60:AC:05:7F
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584863CB0306E3E704FDDE49E6C0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 14061
IP address blocks: 24.144.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:03:06:e3:e7:04:fd:de:49:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=84bef73b-76d8-4880-9eaf-e543a7031bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:54:86:35:eb:c2:eb:42:6f:eb:22:19:7d:
4a:aa:0d:d8:8e:44:08:53:70:50:cb:9a:e6:32:09:
9b:7c:47:4a:0b:7f:3f:bd:25:9b:41:bc:b7:60:b2:
10:57:f1:a0:62:4d:67:b2:c0:73:c0:59:81:ea:68:
03:a3:9b:f2:1f:f5:96:ec:ca:24:81:20:12:f2:ac:
1c:aa:4f:f6:fa:b9:41:42:bd:95:7f:01:ce:3a:03:
a4:02:ba:6a:86:c6:e7:55:fd:81:66:e9:22:77:c5:
42:b1:86:d7:8c:94:8a:75:31:6d:71:4b:d1:25:7f:
66:9d:40:61:3c:da:ba:65:c0:df:c0:85:3a:e3:36:
5e:22:39:cc:7c:fd:ac:83:46:8c:b0:0e:3c:9d:d5:
6b:ef:6c:7f:42:0a:3e:94:5f:34:f9:c6:11:ea:5d:
46:46:1b:bd:5e:d0:09:82:49:57:1b:0a:04:8a:80:
38:58:14:25:a8:9b:ba:60:77:c2:17:66:50:b9:2e:
bd:af:55:4c:fb:64:06:b4:97:3d:c2:72:2c:b7:7a:
e7:3f:0c:61:67:09:33:7b:83:e9:bd:1c:a4:76:11:
b3:98:4f:60:a1:07:12:48:d3:50:41:3d:18:2b:af:
a9:aa:db:d6:7e:6f:40:65:b2:0a:8b:d8:df:97:13:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:42:89:9B:EC:34:32:4A:DD:FA:AF:E0:FE:F6:E4:60:AC:05:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:25:57:26:cf:4a:be:38:a8:ac:fd:08:77:19:a6:e7:2c:fe:
45:09:1a:aa:a5:77:24:82:5e:4e:d0:63:3d:80:e7:ac:00:c4:
00:11:21:3c:f1:48:3b:d1:a4:bb:e0:6d:49:ec:e2:b3:7d:00:
12:94:6c:88:27:69:8e:d3:47:bb:27:d0:9a:1c:bf:68:d1:34:
96:b1:8b:be:ae:9c:3d:08:25:f8:84:ca:13:a3:69:86:e4:61:
ef:a0:87:08:3e:75:6b:42:ff:96:50:e9:e2:7a:6d:44:37:60:
4c:b7:81:f8:bc:30:b7:5a:48:6b:ab:91:49:99:4e:49:a4:19:
d5:43:07:5c:8e:be:a4:69:6d:76:a4:83:1d:60:60:78:5a:35:
7c:1e:4d:aa:7c:70:e9:86:40:c2:96:5d:f9:fb:f0:14:63:c1:
61:af:00:5c:7f:e5:bc:18:96:c7:aa:2e:a3:1a:4c:8e:86:c0:
0e:1c:61:ec:0c:87:b6:ac:a4:8b:01:f8:c6:69:75:a8:a5:f2:
92:3a:f8:35:13:dd:54:b5:d0:14:0e:2b:63:6f:1f:fb:26:7e:
b9:6f:14:31:51:4d:b3:35:d4:76:f3:09:f7:6d:aa:60:30:af:
89:20:fc:e4:f2:50:7f:cd:25:a7:37:20:23:09:e2:58:55:5c:
a2:e7:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:18 2025 by rpki-client