Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b8a00c4-7513-3963-9da3-b67e2acc1030.roa
File: 0b8a00c4-7513-3963-9da3-b67e2acc1030.roa (raw, json)
Hash identifier: fDGFrdoQpSwEFQxF74/fMXigq4Vl6VwFU0bHQIAtHq4=
Subject key identifier: 00:41:18:C9:00:4B:C4:D2:92:D2:D4:BE:53:B8:92:C1:C7:F1:67:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D0C1733D9F78D9656A940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b8a00c4-7513-3963-9da3-b67e2acc1030.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.238.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:0c:17:33:d9:f7:8d:96:56:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e208e6ac-1b52-43ef-bfd1-efe9e52ba562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:b0:7a:cd:8e:03:79:fc:c2:ca:6a:13:49:
bd:38:06:ee:15:89:c7:ac:a9:f2:f0:0d:4f:19:29:
d6:c7:8a:06:dd:99:86:fa:c3:28:af:87:64:e1:81:
d9:61:d5:61:fd:1d:88:de:a7:85:c0:ca:5b:48:07:
f6:1a:8d:10:31:36:86:2d:c4:9a:c3:15:b5:d8:c2:
39:f6:70:e0:18:0b:49:9b:ea:ae:60:b4:a0:f1:e1:
08:d3:3c:e7:c6:bf:59:1e:a9:aa:d0:77:9e:3e:dc:
c6:78:30:be:32:cc:a2:7a:46:19:3f:8e:dd:35:e1:
eb:98:38:66:58:c5:b6:14:2c:0a:67:34:f7:f3:1c:
26:66:64:90:62:93:ff:09:6e:97:0d:74:06:8d:14:
d7:fa:48:c0:92:0c:e8:17:85:4a:4e:c7:8b:6c:01:
a5:54:5f:37:6c:71:90:b0:4e:95:c8:16:69:20:55:
68:bf:d4:4c:5d:14:2b:78:c7:b3:4c:a3:e4:82:6d:
58:7e:a8:0b:62:86:75:d1:09:0c:98:fe:4e:eb:71:
a4:bd:f8:e8:c4:48:84:62:e9:f7:53:5d:84:71:ce:
21:02:13:79:4b:a7:42:4f:57:90:f0:a3:52:5d:35:
e3:1b:05:83:45:f7:d9:d6:66:18:78:e8:39:ae:8e:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:18:C9:00:4B:C4:D2:92:D2:D4:BE:53:B8:92:C1:C7:F1:67:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b8a00c4-7513-3963-9da3-b67e2acc1030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.238.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:b5:90:d9:7a:e2:75:fb:c5:32:60:7d:97:d1:f8:2a:39:8d:
42:03:35:49:e8:c8:d0:9a:59:3e:f4:7e:de:26:3c:46:3b:cc:
9b:0d:b4:3c:a4:10:bd:ef:e0:81:fe:c1:fb:2f:b0:ae:96:e8:
00:06:07:02:2e:0a:94:33:ee:49:08:9d:1a:78:c2:05:2b:bf:
fc:ea:c1:46:fd:b9:a5:b1:33:27:93:60:14:9d:76:e9:3f:1e:
93:9b:50:d5:db:dc:44:c1:93:f0:51:4a:7e:77:1b:dd:53:c2:
d6:9a:fa:2b:87:c5:66:2e:9c:61:72:0b:d6:3a:c6:d7:5e:e2:
aa:35:eb:d6:c1:20:4b:d1:be:49:1f:8c:01:d8:20:e6:0f:c2:
1d:83:7e:9b:d6:37:cc:8f:e3:86:2d:fd:44:5d:52:49:69:f1:
6f:c2:b2:b2:22:c4:16:f3:00:53:d4:d0:54:81:95:45:f8:5b:
dc:79:2b:d4:c5:40:70:20:4d:52:8b:dd:30:38:9c:5c:b6:38:
ce:d8:f7:24:79:61:87:30:87:73:20:c6:d1:18:ce:93:1b:41:
32:0b:6c:35:bd:0d:29:fa:18:74:d2:76:c5:c3:5c:a2:64:03:
d9:fa:96:14:a0:4b:e4:31:5a:1a:be:2d:34:03:8c:da:7a:a1:
c6:18:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:08 2025 by rpki-client