Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dd3aaf7-cfa0-3e91-9b08-e8bcb0763dbc.roa
File: 1dd3aaf7-cfa0-3e91-9b08-e8bcb0763dbc.roa (raw, json)
Hash identifier: O2I2t9gmQ3KWtGZjKVSAcwu8/mJvJuA+/gpMXdgfztc=
Subject key identifier: A5:53:C5:A6:AA:C6:FD:54:52:1E:9A:15:45:95:44:21:29:9D:FD:91
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A875B538AA7A82C0D7600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dd3aaf7-cfa0-3e91-9b08-e8bcb0763dbc.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.20.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:87:5b:53:8a:a7:a8:2c:0d:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8cd0447b-d62d-41b7-839a-e3793612719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:fc:b9:ce:5d:23:54:d8:07:5b:26:c7:38:
82:34:10:ec:80:04:9b:f0:ef:2f:c7:20:b0:18:c5:
67:9e:cd:9c:92:00:20:ee:e3:d8:90:84:c6:bd:79:
d8:c2:74:d9:46:d0:8f:68:f4:27:34:9e:6e:c4:ca:
28:f6:65:2a:be:6e:88:43:e1:f2:86:60:27:dd:21:
b5:e9:97:c8:cc:6c:50:e0:83:5c:3b:cd:10:f7:cb:
8e:d7:7c:aa:03:d6:85:42:fa:2a:eb:34:e2:85:d5:
e1:8b:a9:d5:41:42:6f:c2:7d:eb:c4:99:62:4c:3e:
25:b1:45:a8:3e:fc:10:97:1f:cd:b4:df:cc:86:28:
ae:1d:3c:32:90:e3:e8:aa:b3:8f:96:8a:14:39:f3:
c9:11:93:4b:4d:cf:f5:7b:1f:da:9c:72:63:03:d9:
ff:9f:05:de:2d:48:ce:14:a0:96:e4:55:6e:81:c4:
31:81:c9:65:93:97:4e:fb:9c:5f:fb:b9:97:35:84:
72:9c:55:6a:cc:52:e5:09:b1:2a:9a:38:b2:57:d3:
70:ea:47:f0:59:23:54:80:87:f4:e4:88:a1:27:e0:
d0:89:e9:29:38:23:78:37:36:76:45:47:2f:3f:90:
5c:82:e7:1a:d4:9f:f6:1f:40:f7:28:38:6d:f9:65:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:C5:A6:AA:C6:FD:54:52:1E:9A:15:45:95:44:21:29:9D:FD:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dd3aaf7-cfa0-3e91-9b08-e8bcb0763dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:3b:97:bf:c5:73:0e:cf:af:a0:1b:af:29:99:fd:28:6a:2f:
6f:bc:5c:1f:5e:fe:df:c7:a1:de:05:fb:22:fb:e3:89:9c:08:
17:6f:14:69:8d:67:ba:9b:2b:c6:66:de:59:ae:19:f7:a3:c8:
e1:97:28:51:ce:bd:0a:aa:11:54:9a:d2:9b:71:69:be:27:bf:
16:66:b3:17:b6:6a:eb:a9:46:97:f2:c8:ae:94:23:46:79:f9:
a9:0e:81:55:37:b7:da:0b:4c:15:12:03:9c:d1:c5:12:53:f2:
a3:3b:65:ce:9a:b8:ef:a5:6e:15:a3:21:4d:e6:52:aa:4b:a8:
42:8a:29:bb:d7:ac:3b:c5:2c:51:b4:59:b9:e5:f8:b5:e4:76:
f8:5e:62:57:3e:3a:71:09:58:84:3b:c9:15:b3:82:9b:7e:e5:
dc:9a:4d:a7:7b:3f:2d:be:d6:f0:c3:5a:82:1c:09:95:8a:66:
d2:0e:33:6f:9a:4f:01:d7:47:e8:b4:ab:97:4d:0a:c2:26:75:
a3:0b:be:4f:9a:ea:8d:6e:39:95:72:24:f7:b8:3f:bc:39:32:
80:f4:f3:4a:a7:1c:05:f0:40:42:ba:7d:23:66:9a:21:18:85:
38:f5:15:22:f7:71:0e:ea:a1:28:61:d8:30:76:33:41:37:4c:
ae:1b:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:36 2025 by rpki-client