Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098d8e32-a83c-3387-a1f2-b89301996921.roa
File: 098d8e32-a83c-3387-a1f2-b89301996921.roa (raw, json)
Hash identifier: Ajq+SaILepuMa/Lc9c90Vdl1e/HiBRWHKvYTJTLEsPM=
Subject key identifier: 5F:35:C2:9E:37:DB:B0:3F:D6:A4:6C:34:09:69:20:5D:46:0C:EC:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1264DF5F07FC0B11897B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098d8e32-a83c-3387-a1f2-b89301996921.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.12.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:64:df:5f:07:fc:0b:11:89:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=04002408-669d-4483-aef4-7d4fe906b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:df:ca:4c:44:24:6e:37:bb:18:d7:cf:1c:
93:ab:f1:86:01:d4:99:d0:b0:9b:4c:52:3a:5d:62:
0d:d3:38:5c:43:b4:be:7a:13:26:14:11:ec:a2:16:
cf:b0:52:ca:54:5b:58:ab:06:af:ad:18:98:ec:c2:
2d:eb:d0:ec:d9:bb:88:fd:d2:3d:4f:e2:d8:e3:4c:
51:ae:8c:04:b7:52:2c:89:4b:73:7a:0a:ce:6d:dd:
4a:50:99:74:39:ad:10:57:d0:94:95:75:71:3f:aa:
22:c0:e2:5c:c9:d6:be:c4:67:fb:0a:38:66:f8:48:
38:ab:49:d0:94:7a:f6:e4:03:6b:54:34:9f:3c:a1:
3d:28:94:14:59:3f:de:19:44:6b:15:b8:1b:e3:f6:
c2:39:d3:35:ca:d8:2a:10:9f:b2:a6:9c:b6:12:22:
e3:ae:c8:c7:fb:00:04:ff:d8:fd:a8:e4:66:88:34:
d2:72:ba:16:34:68:1f:31:d5:b6:65:d3:c3:81:67:
25:e1:93:6c:73:2f:bf:f5:f7:dc:cf:17:95:b8:77:
ea:37:65:35:29:e9:06:d8:3e:28:a3:86:71:eb:39:
67:d6:06:b5:b1:46:b6:cf:09:af:5a:0e:2b:09:4a:
ed:14:2e:66:0d:ca:9d:f2:9d:d7:37:48:b2:5f:02:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:35:C2:9E:37:DB:B0:3F:D6:A4:6C:34:09:69:20:5D:46:0C:EC:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098d8e32-a83c-3387-a1f2-b89301996921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:93:96:4c:f6:13:17:e7:35:5c:55:2c:4e:fe:53:3c:5c:3d:
c3:5d:e0:11:72:c2:24:7e:72:bf:18:08:ff:12:ad:47:8f:89:
f2:8d:99:da:df:32:f9:ac:ea:f8:23:0f:27:11:b8:cf:64:c2:
b3:73:4a:67:68:79:31:6f:53:c7:f0:2b:c3:33:8f:42:4d:5c:
01:0f:89:d8:18:b0:f8:5c:82:23:4b:f4:ae:44:53:92:37:67:
8b:9f:e7:e1:68:44:4b:29:47:95:42:61:1e:ac:10:ab:51:35:
24:58:0b:56:d3:58:12:0f:6d:5e:63:44:98:f3:e5:2d:bf:a0:
ce:09:05:d5:62:cf:1b:98:67:7a:97:b4:e5:c4:81:3e:75:92:
bc:70:14:78:f8:c2:58:b3:61:75:d7:79:fe:cb:de:c2:9b:ca:
46:85:9b:83:ca:18:6d:5b:d6:52:8a:fc:f2:f4:cb:1d:f5:04:
e9:69:10:d8:6a:4d:d4:b7:1c:6b:7a:4e:20:bd:ed:38:05:05:
32:59:50:2e:12:2a:18:a6:a0:5c:9f:33:da:97:00:00:75:7e:
3d:34:4a:3b:94:07:1e:89:8c:09:a5:27:fd:08:fa:1f:97:5d:
e1:0c:f5:ef:d3:27:e5:cd:17:d8:77:1b:7c:cb:a7:88:fb:c0:
a0:80:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:10:38 2025 by rpki-client