Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00102dae-e0e8-34ac-b7a1-f7b63a027870.roa
File: 00102dae-e0e8-34ac-b7a1-f7b63a027870.roa (raw, json)
Hash identifier: wMKi37FXQrxWknCgvd/UNKPF1i7efFm/vtPPkqACVXs=
Subject key identifier: AB:59:B0:30:CD:3A:6C:CB:A7:D1:70:84:B1:E6:35:C2:37:53:4F:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126545CAA9433B01276A48
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00102dae-e0e8-34ac-b7a1-f7b63a027870.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.12.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:65:45:ca:a9:43:3b:01:27:6a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ba1b6fa1-affa-469b-aae4-f2e3edb53a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:94:be:ea:be:33:be:6c:11:bc:d9:63:b9:
af:69:95:3a:cd:55:29:f7:e9:36:ed:2c:f5:f1:61:
db:f7:fd:2d:a0:6b:b0:e6:7f:ec:b8:8a:6a:01:07:
12:e1:77:f0:74:9f:bc:67:0b:cb:4e:4b:ee:8b:39:
4c:74:9c:2b:d0:2b:b3:95:bf:82:ab:50:28:55:e8:
90:a1:74:ba:d7:26:f1:4a:07:fe:65:b4:fc:e8:3c:
af:45:cf:9f:23:d3:d7:4d:c5:f7:db:69:90:67:e0:
62:68:36:76:b4:8c:c3:31:c6:0b:92:07:95:b0:e8:
37:9f:0a:eb:3b:d3:27:93:2d:d1:4d:86:0b:04:22:
b0:dc:cd:c0:8a:bf:2b:a4:ca:77:3b:3c:d0:40:64:
94:45:68:3f:e0:db:82:de:97:24:a0:0b:ad:1f:c6:
45:3c:26:4d:6e:de:5b:d6:21:9b:5f:9e:56:7e:bb:
b3:0c:54:19:19:9a:39:1b:43:0a:4c:d0:ff:44:c1:
52:95:fd:4d:39:dd:39:81:f9:4f:b1:eb:3a:ea:0d:
4c:7e:59:af:7a:0a:95:1e:76:eb:9b:cc:eb:80:1b:
e8:ed:fe:cc:ef:30:8d:4d:7a:89:5c:b3:c2:ea:5b:
67:91:a9:63:40:bb:6d:7c:bf:f1:74:35:ad:fa:de:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:B0:30:CD:3A:6C:CB:A7:D1:70:84:B1:E6:35:C2:37:53:4F:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00102dae-e0e8-34ac-b7a1-f7b63a027870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:3e:4d:ec:a7:92:16:fb:42:7b:92:4e:d1:3d:8d:75:f6:07:
07:9b:25:4f:b1:88:d6:e1:31:75:d8:98:c3:a7:ce:e4:ce:80:
16:8a:0f:54:69:17:c1:c5:81:ee:19:df:12:de:16:f9:a7:86:
ba:9d:cc:7f:03:ed:52:a2:d3:c9:a4:04:35:84:df:cc:1b:76:
c4:d7:55:c0:c7:8b:34:12:c4:a0:15:6d:a5:e1:ed:d4:05:30:
77:f6:74:c0:53:e2:40:9a:a2:70:e7:8d:ed:f3:4e:00:1b:08:
72:9f:d1:ca:0e:75:ce:47:7f:b0:f4:52:9e:26:cc:e5:3c:48:
94:cc:fe:95:53:62:89:18:48:8f:17:95:e8:e1:32:c9:42:67:
63:89:17:a5:3b:cf:8c:7c:0e:eb:50:6b:4f:c7:cd:72:10:2b:
75:ce:07:98:40:45:da:ae:b2:67:02:ba:77:be:e9:d1:b5:4b:
30:2d:f3:34:96:bf:0d:31:a9:89:9f:aa:c2:db:f0:2d:10:cc:
4b:39:b5:34:d1:e4:e2:4e:03:19:c0:28:f0:77:c3:d3:32:7d:
03:3b:8e:b1:ed:68:08:9b:d6:40:f5:0e:53:6b:0a:7b:a4:b5:
f0:21:e6:a5:91:72:87:9f:ca:64:64:21:2a:aa:9e:55:97:de:
d7:75:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:33 2025 by rpki-client