Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14badf89-cd6c-38ca-aa42-caf1fc471397.roa
File: 14badf89-cd6c-38ca-aa42-caf1fc471397.roa (raw, json)
Hash identifier: G70wPFuTsj434nY6CY1BNSGpRGrkfJg1YeR1NB42si4=
Subject key identifier: 3D:BD:6A:A7:6C:54:38:82:C5:74:BD:67:89:DE:D7:6A:04:F1:29:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C978ACB2F27588418B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14badf89-cd6c-38ca-aa42-caf1fc471397.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 50.204.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:97:8a:cb:2f:27:58:84:18:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9a411a4c-0a29-4867-aa37-7caaee2b7722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:67:66:c3:c7:16:1f:53:5a:99:32:85:3d:
ca:c2:6d:09:be:2f:a7:ec:29:ea:19:78:8f:3c:05:
1c:2d:f2:e4:57:38:cd:39:20:47:74:b1:8f:db:a5:
82:8a:13:01:53:e6:ba:bc:b0:52:ba:5a:ce:6a:74:
3f:3c:94:46:d2:24:b9:d6:ab:80:02:13:45:98:69:
58:a2:36:00:d9:40:6e:8b:a1:80:98:3e:b5:01:10:
c5:87:ae:52:d2:f8:a9:68:57:fc:70:3a:d5:eb:93:
2b:09:d5:ab:50:3a:93:6c:5a:c5:72:a1:00:10:b2:
79:70:a2:2c:5c:8a:85:28:aa:20:fe:b8:c3:f4:d9:
59:ac:0d:6c:4d:f6:6e:e8:6e:a6:84:61:6f:51:4a:
fb:e6:cb:a3:5a:f4:5c:54:63:65:7a:c4:1d:26:5f:
b2:54:22:ac:bb:12:83:96:0b:0f:25:22:3f:9b:05:
49:cd:42:94:1c:c0:7f:de:c7:6e:40:14:c8:9f:d0:
a2:b8:1d:64:a7:f0:b1:9e:23:f7:39:77:84:47:83:
61:1a:ff:f0:95:ba:2a:75:11:a1:7b:7b:37:6a:c9:
48:fd:13:a3:04:15:3b:6b:75:8b:56:26:d1:eb:92:
54:2c:f4:46:2b:08:23:e6:d9:8f:b1:d0:9b:68:11:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BD:6A:A7:6C:54:38:82:C5:74:BD:67:89:DE:D7:6A:04:F1:29:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14badf89-cd6c-38ca-aa42-caf1fc471397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.204.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:9e:a7:2c:e5:49:a2:85:08:76:19:3c:bc:4f:c5:d8:1c:57:
ac:dc:78:b1:73:c6:f7:8a:4d:0a:31:9e:64:ec:84:99:d9:de:
a9:a3:fc:37:d7:9a:d2:b3:68:f1:89:29:ca:1f:90:1c:51:ae:
98:0c:4d:fb:ea:f5:7f:0e:01:8b:c3:de:de:c1:40:c1:63:b2:
49:60:90:38:84:26:65:cb:6d:c7:3b:ae:e5:80:08:a9:0e:b6:
3b:90:72:a8:94:a7:5d:de:8d:b9:a5:ba:a2:ae:57:c5:67:65:
5c:d3:3e:66:e1:ae:91:6f:54:be:de:6f:e1:0f:08:5a:67:cc:
5a:59:36:2d:ca:1a:23:97:dc:12:52:39:8d:a6:aa:19:5f:4b:
5f:ba:11:fb:4e:dd:a8:28:38:fc:7f:9c:b0:16:e5:9f:80:9e:
cc:99:2e:05:01:af:ca:1c:c2:9d:c2:18:72:23:e4:c7:0d:b1:
e8:ef:86:f1:00:5e:6a:a4:4b:3c:10:77:2b:d3:34:23:15:c8:
ea:75:8d:66:db:e8:de:2e:5d:31:0e:d3:71:c6:7a:dc:97:e9:
a8:15:aa:26:d9:68:d9:3d:74:a0:53:6a:43:33:3b:a9:c6:6a:
fc:ef:c0:17:d6:d3:4a:52:f9:e7:ae:0f:30:29:82:e0:bb:3d:
5a:2f:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:30 2025 by rpki-client