Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f87109d-74d4-322c-a100-c0c6e5af9297.roa
File: 0f87109d-74d4-322c-a100-c0c6e5af9297.roa (raw, json)
Hash identifier: P+IF4khH1BKA4nK7fy1BRy1qhOT2JwLuUiXPTS83IPA=
Subject key identifier: E2:AA:C3:3D:69:C1:34:F7:97:B4:7C:9C:F0:06:27:AA:B2:B7:10:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1176835F1983E2389B1900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f87109d-74d4-322c-a100-c0c6e5af9297.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:76:83:5f:19:83:e2:38:9b:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b9acb592-9e96-4b32-a9cb-287e8b206c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:4f:f0:ee:06:df:6a:75:77:8b:50:66:0d:
b9:51:d6:d4:79:5b:88:91:63:6c:4e:ff:41:d7:1b:
59:31:bf:91:04:65:e6:98:18:67:62:13:54:06:a4:
15:4d:d4:db:05:6f:3f:1c:c5:dc:6a:09:97:7b:62:
c4:a9:9c:98:bf:ea:2c:82:11:4c:1d:c5:59:85:65:
df:9b:89:1d:fb:57:a5:24:a8:53:92:21:09:55:07:
94:11:d0:97:41:3c:16:0d:ac:05:73:5c:ab:31:02:
de:1f:51:77:94:60:7d:b8:04:76:cc:59:cd:2b:f5:
e3:fc:22:62:16:f4:5e:5c:10:67:77:53:64:34:5b:
c9:9f:ba:05:ee:2b:cd:9d:74:94:db:ea:b9:2d:2a:
02:67:a9:66:9f:7d:a0:6d:0f:18:1d:ed:78:81:e1:
34:6c:fd:fa:c3:38:61:cf:3b:d9:39:84:ad:81:c2:
ec:46:b7:89:e0:c3:d7:1e:0c:2a:a0:18:4b:e7:ab:
17:8b:48:1b:d1:e8:29:59:d6:f7:24:fe:bc:93:45:
72:85:40:50:37:77:88:c8:71:4a:34:7a:34:51:b3:
db:03:cf:7b:69:b3:fd:ea:ec:e8:2e:57:27:bf:eb:
66:bd:c4:f8:e3:39:fc:f7:10:b4:8f:e3:67:e0:60:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:C3:3D:69:C1:34:F7:97:B4:7C:9C:F0:06:27:AA:B2:B7:10:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f87109d-74d4-322c-a100-c0c6e5af9297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:98:09:62:a3:93:f8:82:83:3b:d8:03:50:37:e7:cd:65:59:
66:28:d2:7d:f1:14:12:50:cb:ba:a5:87:d6:4e:30:26:e5:b1:
a1:b6:a3:27:63:d0:1a:58:1e:c1:fb:b8:af:95:91:11:e1:0b:
d2:3b:09:9c:94:49:f7:11:bb:60:4c:c2:8e:93:b1:a9:d2:86:
1f:7e:a5:89:d3:f4:88:3b:84:92:22:54:bf:9e:f5:3b:ed:da:
9c:41:7b:16:0e:99:ea:3b:72:57:c2:0a:6f:72:5e:36:28:1f:
15:00:ed:d8:0c:a9:fc:3b:9e:ce:1b:3c:d4:5b:ba:5a:55:23:
fe:c2:f7:fd:83:00:70:5f:91:4b:66:c5:12:de:db:d8:b6:88:
58:ef:02:23:a3:61:62:aa:a6:60:06:0a:2d:f6:78:57:bd:d9:
b7:21:a8:8b:3b:7f:f9:ff:d4:62:ad:9b:0d:3a:cd:e0:62:ce:
8a:23:c2:93:07:08:af:64:e1:4e:95:0e:08:9b:39:cc:da:8c:
a8:8e:3a:aa:22:10:08:8d:cf:ce:78:67:94:7b:20:98:3d:bc:
f5:0d:08:be:83:65:d3:03:95:c6:b4:06:01:37:38:b0:a3:61:
5f:15:ec:48:b1:57:92:19:a1:f4:06:54:1d:43:c3:1b:26:05:
8c:2b:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:48 2025 by rpki-client