Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df04e61-f3b4-362b-9a94-50af55e35fce.roa
File: 1df04e61-f3b4-362b-9a94-50af55e35fce.roa (raw, json)
Hash identifier: tFSU7vAk8VJnyT1B+ivKh7oyzoJ6m7c+/qxVOgAA1Uk=
Subject key identifier: 31:27:92:56:B7:86:52:67:02:DF:0E:80:50:BB:92:B4:8E:AA:D9:65
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126692AF38187628C7FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df04e61-f3b4-362b-9a94-50af55e35fce.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.12.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:66:92:af:38:18:76:28:c7:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d6fbb203-b730-4912-8127-668c678cf77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:b3:9a:d4:36:7c:6c:fa:e0:c0:74:29:ee:
a1:36:0e:1c:49:69:3b:01:0f:09:c2:d0:07:f7:99:
55:01:9c:7d:27:12:30:6f:0f:55:19:a6:50:7e:be:
26:69:3a:81:60:35:0f:f9:3c:63:04:65:2f:31:41:
0c:de:d9:0d:8b:1f:54:87:a4:4f:8e:f6:20:27:d1:
b7:23:c9:b3:e8:76:55:cc:d0:51:10:93:4d:d8:67:
50:c7:ea:0a:37:a7:18:13:3d:bd:46:72:28:ce:fc:
68:8e:ec:fc:f1:55:3f:b2:76:b3:a3:1c:34:8a:77:
1f:43:20:de:b3:f3:25:10:62:81:60:ef:28:41:39:
59:c0:85:cf:b6:a4:21:e5:54:10:c2:db:5e:28:b3:
c5:ef:f6:1b:0c:14:e0:f1:8c:90:71:7d:7c:ec:3d:
c0:d6:e7:a7:64:a0:3d:d4:97:e9:27:a2:27:0c:cb:
e1:3f:47:b7:f3:8e:f1:32:7e:00:9a:4a:dd:32:d0:
f5:82:91:8d:b7:9e:ee:9f:d4:74:b9:98:bc:3a:a7:
55:5b:7f:f5:84:33:ca:00:84:e1:73:0b:18:9c:d4:
5e:65:bb:c0:f3:c2:75:04:94:97:d0:98:37:c2:9a:
2a:90:20:52:5b:83:b6:5f:70:e4:8f:ad:e8:cc:89:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:27:92:56:B7:86:52:67:02:DF:0E:80:50:BB:92:B4:8E:AA:D9:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df04e61-f3b4-362b-9a94-50af55e35fce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:06:3c:76:a9:ba:a0:a9:07:2e:50:9d:95:bd:fc:3a:3e:96:
ac:7e:06:4e:aa:c3:ad:55:42:20:c8:d1:a3:10:6c:3f:28:bc:
1c:18:32:c4:a4:84:e5:a2:f4:20:a9:14:46:16:06:1a:a2:1c:
0d:ad:53:0a:6f:1c:d6:5b:7f:e1:71:aa:dd:80:9d:63:34:c8:
89:36:c9:15:7b:4a:28:b5:88:45:d9:34:c3:5a:9a:86:d9:dd:
27:ad:3a:f9:f7:e4:6e:eb:34:e7:9b:37:59:0f:53:0c:5c:dc:
d2:0b:8e:ae:39:14:0d:2e:f7:11:27:fd:14:a1:c9:70:b6:76:
fb:9a:85:6a:b1:e3:7a:90:6f:49:e1:2e:db:27:a6:52:82:44:
e3:38:68:c5:4d:9b:f1:2d:16:62:b6:51:3c:68:55:61:4f:28:
1d:8b:c1:86:3c:c2:a2:30:50:0e:29:a5:f7:22:17:de:e4:f7:
13:dc:ce:fc:7b:e9:8d:d2:09:1a:9a:6c:ef:78:43:cc:fa:ea:
d1:50:d3:ab:f3:14:44:dc:bc:0e:55:cc:69:ec:af:c9:43:03:
9a:fe:ab:bd:c2:40:de:ef:03:dc:99:9a:f8:9e:e3:16:ca:59:
aa:aa:30:e6:ea:f8:61:4f:61:12:0b:e7:17:d1:63:60:82:65:
7e:28:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:48 2025 by rpki-client