Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea0f324-312a-3633-bf7f-75ed7cb6c718.roa
File: 0ea0f324-312a-3633-bf7f-75ed7cb6c718.roa (raw, json)
Hash identifier: wo5bymWj/BwZF5dSLCFYiWqxVOxtlP5efyfY2/5d6F8=
Subject key identifier: BF:B7:0E:8D:34:05:4C:AA:4B:67:DD:64:14:20:2D:46:1E:3D:4C:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DA88FA0B913D0B068FD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea0f324-312a-3633-bf7f-75ed7cb6c718.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.91.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:a8:8f:a0:b9:13:d0:b0:68:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3cab35a0-82f0-4c57-919d-ab0fc14786dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:fa:ae:35:6a:a8:1f:a0:c8:34:98:2d:e3:
d4:f6:34:78:4c:14:99:15:8c:7f:ea:ed:5a:b0:a8:
6d:b9:06:dc:09:8a:9d:44:78:41:c7:d8:61:1c:e1:
cb:a6:ab:de:08:47:06:1d:65:ad:4b:e7:8c:80:46:
e7:34:ca:39:96:ff:12:41:76:ee:b4:8d:a5:6d:e6:
a1:7c:df:7c:5b:3b:a4:65:b9:4c:80:6d:e8:c6:9b:
e9:5a:97:7d:3b:02:d6:53:ac:67:31:91:a1:5d:fb:
40:11:1a:c5:b9:69:4c:01:21:c9:e3:6c:a3:64:2f:
8c:28:17:a9:56:71:01:cc:74:c0:77:46:48:a8:d4:
8a:ed:34:3e:8c:b5:2d:75:d5:7e:9c:8d:48:1e:2b:
9d:d8:e7:75:84:74:76:6b:42:dc:8e:3c:fe:14:cd:
f7:d7:3e:8b:de:34:da:22:35:d4:24:92:bd:53:1e:
14:e9:40:6b:1e:4f:58:dd:73:3c:13:45:4f:01:3a:
68:76:f2:17:ad:2b:b5:b1:95:91:ae:c6:fc:81:49:
7e:46:b4:da:0a:62:2d:b3:2d:77:9e:d7:37:f4:b7:
ef:eb:ae:7e:7f:b0:95:9b:65:ab:a8:d1:92:2a:07:
ea:f9:1b:cf:d6:30:91:36:42:da:96:2d:12:7a:ea:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:0E:8D:34:05:4C:AA:4B:67:DD:64:14:20:2D:46:1E:3D:4C:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea0f324-312a-3633-bf7f-75ed7cb6c718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:81:2f:2f:93:56:a7:82:b6:db:97:2f:b1:6e:8f:90:2c:79:
eb:41:0f:0a:85:46:4b:f6:c5:98:0d:6b:97:71:2e:53:5e:b8:
65:b5:c0:77:c5:92:66:8b:16:7a:21:48:cf:89:05:bb:ad:84:
f4:b9:d8:d2:c7:e1:6f:48:10:23:5c:19:b6:35:b2:da:ec:33:
fc:60:1a:d1:39:d7:a0:2d:f8:b7:cb:26:c1:91:c8:bc:37:dd:
53:85:da:d2:71:c3:f3:a6:fb:6e:e0:85:1b:55:93:85:2e:85:
72:2b:f1:a8:d0:f7:c0:ca:a9:a6:9e:04:61:f5:34:ad:0e:ae:
52:72:3b:fe:69:76:b1:66:e6:20:62:74:33:9f:de:97:55:24:
4e:27:06:2b:c2:bc:97:c3:25:52:82:92:81:33:dc:a4:94:4e:
1e:40:86:53:6f:20:25:21:9a:b9:72:09:7e:fa:76:18:dc:d9:
78:22:f4:d4:24:3d:87:9c:57:75:7d:76:a5:81:73:72:9b:12:
bc:8f:22:9a:96:69:9f:e5:68:74:91:86:5f:e9:e1:1f:47:f3:
22:d5:c8:c5:1d:a1:21:a1:bb:f2:15:6a:85:0b:eb:dd:58:7d:
67:62:0d:01:96:c8:12:e3:7d:c6:56:68:8b:b3:ea:40:48:88:
a3:3f:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:22 2025 by rpki-client