Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b1bfe2-69fb-3d50-98b2-6f619dfe818a.roa
File: 32b1bfe2-69fb-3d50-98b2-6f619dfe818a.roa (raw, json)
Hash identifier: 0mBeUQKzZDW/PiIetYMc7b94wzYF4ZzlhtaYoXVOZ9U=
Subject key identifier: E1:62:FB:55:2F:5F:12:DA:13:37:41:ED:8C:74:59:F1:01:60:F1:AF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126399907C0144B3C02880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b1bfe2-69fb-3d50-98b2-6f619dfe818a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:63:99:90:7c:01:44:b3:c0:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=87a62bf3-9419-439e-a53f-17c9ecff1504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:d1:77:02:6c:22:ae:c4:ae:cc:14:74:60:
1f:2c:07:a8:f2:f1:75:1c:c9:55:dc:d1:b4:9f:9f:
2a:1f:21:cf:24:f9:e7:91:9b:67:1f:71:4d:e5:46:
f4:13:a2:76:62:e0:17:8e:aa:e9:f6:12:e8:41:26:
fa:6a:28:fc:dc:97:f4:77:38:24:ba:e4:df:49:ef:
df:04:95:dc:71:a3:01:6f:3a:96:af:c1:53:db:d3:
51:83:4a:40:c8:d9:ea:fe:ea:0f:57:a5:a4:30:7e:
6b:5d:e3:ba:3f:ff:d9:77:5f:6a:f5:07:8a:6a:7d:
11:b6:7e:10:de:37:df:cc:f0:36:9a:16:e2:89:50:
02:19:8a:e0:cf:36:ce:09:b9:42:5f:7c:a9:e4:13:
1a:8e:9c:7c:b3:1c:ef:7c:96:c5:17:5b:89:c4:ea:
43:64:cd:e9:cc:fc:40:29:15:f1:3e:8e:6f:8a:7c:
d2:74:55:16:e6:81:54:3a:c2:e8:9a:f4:af:ec:1d:
06:9b:a0:42:71:3f:18:85:d4:48:1d:3a:50:10:ff:
14:43:58:d3:80:31:5b:55:e1:1f:eb:97:08:65:6c:
12:74:15:23:42:7e:57:83:15:47:6f:65:31:03:4e:
4d:c8:a7:78:50:98:e9:ff:d2:b5:51:f3:3d:85:2a:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:FB:55:2F:5F:12:DA:13:37:41:ED:8C:74:59:F1:01:60:F1:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b1bfe2-69fb-3d50-98b2-6f619dfe818a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e3:e2:97:9f:f5:c9:a4:86:50:1e:47:e0:67:03:b3:0c:61:
fc:8f:44:33:90:c6:8d:f5:18:88:cf:d8:11:b4:8e:39:32:a2:
46:ee:90:22:89:a7:d0:3e:75:d3:f6:b3:b0:d6:b0:75:78:f0:
bd:ff:d9:b6:ae:23:43:3a:ae:d8:f5:90:fe:7d:ce:a7:4c:3f:
26:e6:d9:ce:dc:78:ff:57:0e:28:4d:69:25:20:96:27:db:de:
2b:8d:12:b3:eb:db:20:db:e5:c2:99:5b:d5:9b:f0:16:67:41:
f4:5e:03:26:ad:32:73:39:b3:b7:96:3a:40:75:0c:46:6d:db:
f0:8a:40:a8:35:05:f0:2f:dd:e2:ec:c5:73:07:84:9d:01:5c:
ad:25:56:b0:d4:f3:0f:b2:e4:26:62:b8:ca:38:c6:b3:c2:8b:
54:20:da:df:e3:4f:88:13:3f:f2:4f:cd:06:8f:df:07:36:d1:
32:6f:0a:58:80:8c:0c:b6:69:80:0f:62:e2:9b:56:27:3b:09:
b1:fb:e2:06:23:89:50:d2:d5:03:3d:3b:3e:af:3a:a1:a6:4f:
f7:c4:bc:20:58:d4:ac:6e:6c:b9:c0:d3:7e:4f:c5:16:0c:c6:
af:ee:7a:8b:95:47:31:35:98:6f:cd:35:74:6a:8f:00:62:05:
d4:63:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:19 2025 by rpki-client