Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fff45bb-c86e-3b3a-a011-d1f8dc915963.roa
File: 0fff45bb-c86e-3b3a-a011-d1f8dc915963.roa (raw, json)
Hash identifier: 4adKiTkZSH871j5BO1j8tk31q3pIkqTK1bhFpzzOjoI=
Subject key identifier: 6E:FE:10:50:31:26:28:25:D3:CA:CC:D2:3A:E4:0B:4D:3F:26:48:97
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C103B63B0766784CA90F4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fff45bb-c86e-3b3a-a011-d1f8dc915963.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.11.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:3b:63:b0:76:67:84:ca:90:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1c7f3457-649f-4ac3-a575-cb83016a4089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:0b:51:f7:bd:c0:db:96:42:bd:40:31:5c:
00:e8:d9:77:4d:52:f1:16:e0:11:13:ef:8c:b0:47:
b4:d3:80:8b:47:61:7e:d3:bb:e7:93:08:7d:8a:f2:
f1:21:74:cf:6a:d9:fa:3c:e7:32:31:5c:30:a9:d0:
a4:f2:4a:4d:e9:b2:94:44:37:8e:e4:94:6e:c3:cd:
0a:e5:12:f5:75:79:b6:1a:89:91:b3:2c:35:6d:83:
5b:74:50:69:20:cc:d2:56:0d:e9:5d:8f:e8:b8:3d:
a7:a4:e1:71:e7:1b:04:07:6e:8f:b6:ac:a9:05:94:
88:ea:89:79:55:21:54:35:00:5e:85:d8:7d:e2:ff:
83:fb:a5:9f:f5:91:67:a2:f8:24:8a:67:4c:fc:8c:
8e:f2:dc:3f:e1:6d:44:10:84:15:aa:b9:95:87:9b:
38:b9:c3:0f:14:71:e0:b3:c7:32:16:5a:9f:d0:c1:
90:6f:76:86:46:7d:78:f1:9e:c4:05:17:01:a8:51:
d2:11:3d:86:0b:65:d2:13:36:16:78:f1:19:c0:bd:
6f:34:1f:57:fa:03:89:d5:e1:c9:bb:68:55:d9:8e:
e6:ae:45:e1:b9:ac:bc:c9:32:54:d7:43:fd:36:11:
0d:4d:a5:a6:83:5b:1e:91:7e:71:36:7a:53:c3:33:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:10:50:31:26:28:25:D3:CA:CC:D2:3A:E4:0B:4D:3F:26:48:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fff45bb-c86e-3b3a-a011-d1f8dc915963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:84:30:52:fe:62:a1:e3:d5:43:ee:a3:80:1f:e3:10:90:21:
81:07:d4:5e:33:1e:08:6f:40:f2:da:82:c7:d8:a7:76:76:7f:
9f:b2:de:09:fa:19:d9:66:50:92:02:23:d4:e3:eb:94:74:e1:
26:1f:8b:79:78:b7:75:50:6a:a3:7b:5e:7a:70:f2:1b:9c:df:
6b:83:e8:dd:7e:b1:92:79:9c:bb:07:d8:f9:79:1b:39:66:eb:
d2:7e:ca:f0:4b:de:ba:77:cf:09:53:c1:a9:86:1a:1d:f9:e2:
95:fa:42:9d:14:47:b8:a0:3a:d2:21:50:9c:7d:f6:89:7d:e6:
1c:56:89:98:7b:61:4a:b4:c1:07:09:23:19:c2:68:99:96:9a:
79:bf:1f:e9:a7:05:d6:0c:13:63:75:f3:30:03:63:ac:14:fe:
6a:69:c2:77:9e:f3:27:25:02:dc:db:ee:81:1d:fa:5d:14:8e:
a0:63:82:7e:23:af:00:6a:96:19:54:b8:ec:ea:7a:80:26:15:
68:f9:6c:d6:77:f9:77:bc:97:72:33:37:19:17:77:5e:4b:61:
72:d9:b9:f6:ac:09:8d:5c:8a:3d:13:3e:fa:c8:3b:81:9a:a4:
ce:d4:e6:1a:62:4e:ec:37:1f:e7:bf:dd:6d:e3:3a:f4:1d:b5:
1e:28:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:02 2025 by rpki-client