Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1457bb16-2a67-3f4e-90f1-5d80bb8dda2a.roa
File: 1457bb16-2a67-3f4e-90f1-5d80bb8dda2a.roa (raw, json)
Hash identifier: us6KUpOFzRDokhGDhJLHZjCZLX0VebL8CfWNyamaqVQ=
Subject key identifier: 27:73:DA:C7:89:A6:C9:73:7D:C5:CA:25:15:3F:B0:CA:BE:79:6D:4F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10C7A9930868BD74644180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1457bb16-2a67-3f4e-90f1-5d80bb8dda2a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.13.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:c7:a9:93:08:68:bd:74:64:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3df7e980-71c3-47f3-bc41-e33719b28d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:18:e9:bd:72:7a:a5:bb:59:bd:00:a0:17:
bc:63:0e:e8:5a:e6:f1:e4:9d:e3:dc:34:2d:c8:5e:
89:f0:33:a6:f8:9d:41:3b:44:b7:9c:f4:70:ba:80:
bd:ee:f0:d4:e1:03:3f:7e:e0:18:ed:ff:81:68:69:
4b:e0:4a:e4:ff:50:72:19:ea:d6:e1:eb:6a:63:4f:
a6:4d:e5:92:16:ff:de:6c:b0:ac:f9:c3:31:a4:5d:
98:b9:45:02:50:a4:44:51:b8:31:3f:ef:74:30:ed:
8c:b0:d1:b5:8e:47:ea:37:5d:6a:43:b0:d4:e4:0c:
92:a6:68:e2:aa:2d:b1:c5:f6:bd:1a:0b:32:88:1d:
08:0f:16:2f:4b:86:4c:1b:80:65:c2:2e:62:2f:f2:
99:5b:9c:cb:ae:67:6e:a2:f6:67:c5:ec:5b:d5:8a:
d7:f7:89:ff:95:be:75:3b:5e:39:92:96:c3:55:7a:
7c:b8:32:b3:4e:52:d9:a1:8a:f0:08:83:f0:71:53:
07:22:05:e5:12:6c:4e:58:a4:d1:a4:19:f8:dd:e5:
5d:d2:e3:00:1a:46:92:ba:2c:44:77:3a:b5:0f:c7:
2b:4c:9b:a9:c0:16:5e:08:2d:2c:e1:32:5d:86:bf:
e4:6d:bf:ea:e4:63:53:c7:69:02:36:ef:da:62:4d:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:DA:C7:89:A6:C9:73:7D:C5:CA:25:15:3F:B0:CA:BE:79:6D:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1457bb16-2a67-3f4e-90f1-5d80bb8dda2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.13.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:dd:f0:fb:07:b7:e5:8b:1b:56:98:6f:ff:7c:2e:7a:7f:ea:
3f:67:54:af:b4:34:ea:93:3a:6f:a6:6e:17:b7:00:8d:da:8c:
10:63:7e:ef:a3:52:60:d4:b0:78:79:70:35:07:54:57:2c:62:
c3:f2:66:55:ac:00:51:c7:41:ce:a0:f7:be:52:42:59:b0:91:
aa:20:21:a2:24:69:68:cc:f1:0e:38:1c:9b:e8:d4:19:69:a5:
c3:69:dc:22:26:40:29:16:53:8b:a0:1e:a0:2f:36:b9:43:3b:
48:a4:53:d4:9e:4f:5e:b3:b1:72:a6:35:24:45:f2:49:d7:ef:
35:b9:31:19:cd:3b:62:68:c8:f0:ca:36:44:41:87:40:de:27:
21:67:44:f2:48:31:61:eb:d5:e4:f2:43:7a:17:29:a2:10:34:
b3:fd:39:e5:5d:7d:bc:35:c8:31:3a:58:49:95:42:a2:e3:a4:
ec:49:bc:ed:bf:9c:66:55:be:47:01:01:95:62:ae:bb:c7:2a:
ca:8d:cd:b7:dd:4d:8c:53:df:b3:89:21:77:75:ff:6d:29:1c:
6a:4a:b8:ac:44:09:ec:b7:4c:e0:0a:c3:24:90:37:f9:97:f9:
69:d0:29:0b:ca:0e:22:17:19:36:34:25:d1:d5:db:9f:3d:20:
5c:85:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:11 2025 by rpki-client