Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6da7ce-2815-3f15-998c-b52ac2c71c3e.roa
File: 2b6da7ce-2815-3f15-998c-b52ac2c71c3e.roa (raw, json)
Hash identifier: OH7lQpVFzMML2rweW7RoCz94anqzAzkbvayKRncMsmY=
Subject key identifier: 1A:81:D8:C5:60:B2:47:2E:37:30:C2:62:5F:E7:A5:29:53:4F:3E:96
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AC3683F9FF445654D4280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6da7ce-2815-3f15-998c-b52ac2c71c3e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.147.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:c3:68:3f:9f:f4:45:65:4d:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=38bbb9b8-a031-4be3-99b9-51e683fa781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:bf:00:48:fe:d5:a5:78:d9:a0:ed:3e:55:
fd:3c:33:b0:e3:72:d4:57:91:2f:57:3c:0f:60:ae:
8f:ad:ff:84:a2:12:77:86:75:45:ac:d0:32:a4:e5:
25:83:b1:3b:ca:ba:49:c8:91:24:89:27:da:b8:ca:
38:f0:15:d1:b2:94:53:24:79:2f:5e:8b:f8:cd:7b:
13:e6:d4:01:77:56:d1:a7:49:cc:10:32:6d:f6:8f:
e0:1d:4e:37:d5:c9:d1:9f:c1:78:0f:66:db:7a:cb:
f2:a8:be:5f:6c:2d:7c:54:5c:95:22:8c:73:6f:a2:
31:04:6b:7c:ea:ba:93:1d:57:7a:6a:3b:c0:17:52:
4c:18:33:3d:dd:af:92:4c:59:dc:96:b6:eb:3d:91:
69:e6:38:b4:83:be:fd:1e:20:c9:a1:51:56:2b:84:
89:c0:e4:7a:a2:18:b5:f8:eb:4e:eb:c3:d2:18:d5:
ee:1f:68:f4:59:ce:0f:2b:60:a3:d4:01:77:08:7c:
64:d6:55:74:d1:8e:2c:23:4c:b4:a1:f4:eb:20:53:
d1:4c:12:d7:74:12:e4:db:10:60:90:64:7d:82:04:
20:04:d5:2f:5a:37:26:c2:05:18:de:06:cf:0d:e4:
4c:a2:3a:c7:67:73:d3:27:ad:9b:e7:1b:b2:c6:e2:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:D8:C5:60:B2:47:2E:37:30:C2:62:5F:E7:A5:29:53:4F:3E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6da7ce-2815-3f15-998c-b52ac2c71c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.147.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:a4:d6:c1:4e:d8:47:8a:da:68:81:9c:50:59:af:01:57:d8:
35:df:28:50:62:22:f1:c2:2a:a9:24:26:96:d0:d3:97:6c:46:
b9:18:72:ca:03:cd:4e:c5:31:7d:6a:50:07:9c:62:ca:ac:f4:
0c:f8:96:01:7c:2f:9c:3a:fd:9b:30:54:be:57:c5:12:be:e2:
bf:f0:fa:a4:95:2e:b8:94:c3:f6:d3:6f:fd:5d:4c:24:b1:fd:
0f:77:0b:4e:1b:e6:75:65:0e:a5:bc:4b:f0:c6:cb:45:3b:40:
4b:8a:81:51:b9:df:a3:f6:75:23:6b:be:5d:42:15:3c:ae:8b:
f6:af:81:02:b4:6c:5a:d5:20:02:b7:e5:8d:e5:fa:ce:9a:55:
23:11:17:12:3a:5e:b9:bc:f9:27:b8:93:68:10:27:1e:36:d6:
92:9a:e9:59:9b:b1:91:83:4a:63:3c:fd:eb:0f:23:d1:a9:a1:
89:9b:0f:19:db:7d:54:6b:ff:05:3e:da:f7:4c:60:44:b5:0f:
38:b4:1d:ae:ce:40:50:dd:c0:a6:2d:64:c2:8a:9a:c3:b2:6c:
32:7b:54:de:e8:fd:80:82:5a:ce:3e:00:3a:9c:33:59:3e:a4:
8d:52:13:c0:6c:51:af:3a:3e:cf:4f:d0:b1:5d:bc:41:81:c1:
a7:05:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:00 2025 by rpki-client