Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b010230-a0e3-3436-b347-0f49266ca5ae.roa
File: 2b010230-a0e3-3436-b347-0f49266ca5ae.roa (raw, json)
Hash identifier: 738eWxIaLIGMgRih1JJ4KtZ0q6sy49q4E3rLHpk4LRg=
Subject key identifier: A9:D3:9E:97:2A:DB:37:E3:0F:06:04:B6:52:DD:60:3C:ED:26:00:BF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1177ACFD7A153520DC51C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b010230-a0e3-3436-b347-0f49266ca5ae.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:77:ac:fd:7a:15:35:20:dc:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2867a3cd-59ad-4cb0-964a-414f278a4990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:dc:5f:37:e1:c6:8b:a2:96:85:14:00:7e:
86:9a:cf:a8:26:f4:60:51:89:72:74:67:3a:d2:7f:
09:3f:93:0e:d4:60:c1:a3:7d:83:bd:45:87:1c:d8:
9b:a4:be:06:b9:ba:d4:56:f6:af:ad:4f:b5:5b:75:
55:c6:9c:19:cc:9a:67:51:cb:84:5e:5c:71:36:1b:
88:d4:f6:91:6a:b4:16:77:be:69:ff:90:d6:ee:30:
8b:a4:26:69:6a:90:11:a7:26:f3:ac:e3:d3:a4:26:
13:59:30:83:7b:db:6d:33:2c:2a:5f:e7:cc:0a:f4:
28:b4:7f:8d:f9:96:40:17:6a:7a:da:4a:0d:6e:b2:
61:8c:87:ea:31:67:8d:a3:f7:1b:a8:3e:0b:de:de:
d2:a4:d0:96:30:b0:62:6d:61:67:a2:7c:59:70:44:
69:a5:a8:a7:d9:4f:36:de:f0:09:42:35:a5:c7:9d:
ef:30:35:1d:1e:9b:ba:05:dc:a7:10:bd:7e:7c:d7:
f5:b2:a6:fb:35:77:90:dc:de:da:ce:32:3a:55:14:
9c:d3:17:cf:8c:ed:36:a7:f1:d1:88:1e:cc:92:79:
fd:bc:d1:11:2a:05:3c:28:c9:a9:01:6d:f7:fb:d4:
41:e5:f1:ce:65:79:3e:d7:90:e2:8e:a5:2a:da:cc:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D3:9E:97:2A:DB:37:E3:0F:06:04:B6:52:DD:60:3C:ED:26:00:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b010230-a0e3-3436-b347-0f49266ca5ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e5:ad:85:7a:da:27:33:89:c2:e4:b2:a4:33:4d:70:43:c0:
3f:93:d7:41:08:79:62:5f:6b:d1:cc:25:ac:d8:d6:fe:7e:6a:
21:bb:93:1c:b2:0a:d0:c8:7c:e1:33:85:3c:b8:1f:3d:02:32:
83:0d:09:84:14:19:88:97:64:7f:d7:6e:6d:af:60:8e:90:cf:
d3:34:73:17:1f:46:ab:6f:b3:90:75:ed:cf:4b:22:b8:0a:fd:
bc:c5:79:38:65:ef:33:8c:b1:a0:ac:12:51:eb:b6:9f:b5:ab:
31:74:0b:14:a7:b1:a2:95:92:8a:13:b4:a7:a6:df:d1:b6:78:
2b:fe:2b:78:47:86:1b:e0:87:59:f0:fa:f3:78:5d:d8:c4:b7:
3b:28:de:ae:1f:29:fc:56:67:ea:38:3d:55:63:56:6c:eb:f1:
bd:df:39:76:d4:c5:e7:ee:55:9b:e0:81:a5:6c:72:f1:cf:63:
33:78:17:a8:b4:55:14:2e:b3:61:bf:a1:45:7b:e1:8a:ab:63:
0d:bf:0d:4f:f9:06:42:1d:9d:79:29:e7:b8:eb:e2:db:77:4f:
8c:5d:4f:33:44:a2:f4:97:8f:28:39:97:54:85:9a:fc:45:4e:
7b:62:5b:c6:22:10:0b:38:0c:6f:69:28:f8:a9:22:51:3d:a4:
64:1c:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:57 2025 by rpki-client