Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa
File: 29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa (raw, json)
Hash identifier: y2luZbfJ9as+MP1eKxGWyCGTefdQ9vKQmgdjVvaa0gE=
Subject key identifier: 0A:04:6C:8C:4A:43:18:15:8E:8A:CA:83:AB:49:77:3D:F5:85:09:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D8EA33A2B31893FE04800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.34.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:8e:a3:3a:2b:31:89:3f:e0:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e9944e61-84bb-485b-a674-ab663e7f54ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:7c:10:a6:b0:92:c3:6a:ef:2b:39:bb:83:
11:88:31:48:13:3e:39:a7:09:d6:5c:ff:77:8e:db:
16:ca:7f:b8:69:87:85:ab:7a:57:1c:dd:50:c0:24:
09:d7:2a:7d:3e:33:09:ac:73:87:01:f6:b2:ac:e9:
0c:47:a8:15:ed:05:a3:73:be:b8:7e:34:f1:45:37:
d2:a9:03:eb:24:a0:fb:54:c8:ee:fd:f3:22:1d:ce:
57:f2:af:03:00:f3:72:35:7b:9c:b6:72:20:7b:6b:
22:0a:08:45:86:17:20:eb:9c:99:38:10:ff:e2:bf:
c7:56:2b:63:72:f9:b5:29:be:4c:cf:78:d5:5e:fb:
6a:b0:36:0c:21:ac:ea:76:7c:2c:e7:af:75:c9:80:
2c:97:ce:61:67:28:b4:99:e7:5e:fd:22:4a:91:78:
17:dd:ca:ed:a8:fa:71:99:59:8b:1a:f4:8f:d8:b2:
12:3d:95:b4:08:e7:d5:e2:23:08:72:e2:16:3f:c9:
6b:62:4a:f7:16:f8:81:ef:8b:a5:fb:5b:8b:97:0f:
3f:57:9c:36:0c:f7:12:88:ee:5a:84:fc:59:db:f7:
60:ea:15:b8:8c:ee:e3:fa:73:88:1f:48:65:ad:45:
19:0a:db:b0:42:bc:90:b7:da:d0:44:08:7a:5c:dc:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:6C:8C:4A:43:18:15:8E:8A:CA:83:AB:49:77:3D:F5:85:09:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.34.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:3a:a4:e2:cd:8d:87:24:24:88:3a:fb:27:d5:68:86:1c:f6:
cc:2d:4a:9e:71:36:21:09:05:83:00:42:ff:00:70:ce:d9:96:
03:06:3b:4e:2d:63:47:a3:0e:26:10:d9:b6:5f:86:c8:66:77:
26:be:87:a7:e5:86:cc:22:de:c2:e3:8d:d1:78:ec:c3:1a:0c:
88:72:60:d7:1f:8a:9d:8c:6b:99:c4:7e:b7:e0:09:35:28:0a:
34:f5:37:da:f7:0d:5c:38:8f:49:2d:72:b5:13:c3:1a:a4:ac:
1a:80:f4:a2:e9:23:b9:42:9b:ad:a6:49:af:f4:09:bf:46:f4:
91:25:c8:68:b3:82:d3:49:47:49:96:ce:91:ae:16:c6:67:7c:
0a:de:32:a0:25:3e:0c:b2:de:50:73:6c:64:29:86:b4:b1:eb:
6e:7e:e3:9e:6f:4f:40:3e:97:56:32:0e:e4:4e:d4:01:a7:b9:
94:51:a0:74:ab:a8:a9:fa:e4:b9:1f:32:a8:0e:ca:45:98:dc:
62:37:31:ba:c0:df:99:e8:f9:86:72:f8:d7:ce:ea:e3:a2:62:
c2:a5:c9:8d:0e:f3:ab:d5:5c:b0:c3:37:22:e1:20:a5:2b:8f:
a4:12:1f:c7:68:4d:d6:1e:19:c7:0a:a0:b6:e7:b3:cd:94:a5:
77:41:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:29 2025 by rpki-client