Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6faac3-5d8b-3443-8f75-0a8a9c6e250a.roa
File: 3b6faac3-5d8b-3443-8f75-0a8a9c6e250a.roa (raw, json)
Hash identifier: wbLx/PkeuI3N01NKcerpaYO7vjG1s+c3B/44gJQOso8=
Subject key identifier: EC:ED:3B:1D:F0:B2:E6:27:52:5B:39:29:EF:F9:3A:14:1C:60:B1:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A898B568199E64EC69B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6faac3-5d8b-3443-8f75-0a8a9c6e250a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.21.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:89:8b:56:81:99:e6:4e:c6:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=10fc2d67-1b36-41f1-9180-0554058f0cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:de:f9:26:8f:45:90:db:25:ef:e0:9f:d5:
ce:d6:f5:60:bd:46:1e:15:64:85:29:3e:cd:37:0e:
1b:90:2a:d2:d1:ec:77:a7:fa:fb:c7:80:fa:98:db:
3c:2a:df:59:40:3d:7a:15:ef:b4:20:16:71:60:d0:
ef:6f:ba:ca:35:48:41:d2:df:51:f8:b8:1d:54:2d:
b8:2d:2a:84:fc:6a:9d:0e:35:8f:8c:e5:5f:8a:75:
b0:b1:ab:91:74:fb:d7:91:9a:28:90:76:c1:23:44:
b8:4d:f9:db:1d:a9:72:34:e9:fe:9f:4d:58:63:bd:
77:be:de:b7:ec:f5:96:f7:c4:59:78:d9:e3:17:52:
87:77:57:37:b9:36:12:35:63:7d:c5:ba:dc:8f:ed:
37:76:0c:35:61:68:95:68:ab:ce:0d:7a:d9:89:33:
d6:65:38:0e:3a:a8:0f:70:70:6f:c8:3c:99:92:45:
91:5a:85:a3:36:cf:2c:d2:00:89:a0:17:6c:ac:fd:
40:72:4f:2a:bb:63:ad:82:27:51:b5:6f:54:d9:83:
31:00:44:26:24:26:20:44:03:fa:fc:b6:3d:37:fe:
36:11:5b:f5:b8:a5:26:2d:70:37:79:57:20:bd:31:
1b:93:ff:64:eb:a4:e6:ca:7f:d9:a3:5b:e4:c6:42:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:3B:1D:F0:B2:E6:27:52:5B:39:29:EF:F9:3A:14:1C:60:B1:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6faac3-5d8b-3443-8f75-0a8a9c6e250a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:1d:f5:d9:66:21:20:a1:8c:90:6b:59:77:98:0e:9e:71:67:
ea:52:ac:61:40:d1:89:83:12:bf:46:57:ac:e8:46:23:01:72:
ce:9c:e5:d7:ab:ee:c5:01:84:f2:b5:bc:6a:20:89:57:9f:ea:
cf:c3:61:7c:0e:7d:97:f2:9d:61:7e:4b:db:ee:0d:25:93:a3:
ce:3c:23:5a:b3:42:41:4e:3a:14:d9:8f:01:41:59:d9:96:df:
f5:27:8e:6c:cf:40:cf:37:46:de:33:36:bf:64:2c:e4:d8:73:
43:e9:38:60:8f:6f:32:a7:92:7e:df:df:78:f8:4b:37:1c:3f:
c8:b1:fd:7d:17:a2:14:78:59:9b:d4:a4:f0:77:d5:85:b5:6d:
73:db:60:ea:96:e1:54:8b:bf:d6:c8:8d:42:fd:fc:4c:f3:c9:
8f:4b:e7:97:39:4e:94:dd:b3:ab:c7:a3:76:a3:bd:86:3f:d8:
fa:41:4b:cb:3d:9b:ce:8e:56:1f:31:0c:05:e1:03:1b:cb:74:
09:31:5a:a4:43:96:9f:95:89:f6:c0:9b:0a:54:02:79:c3:33:
db:e7:45:5d:30:c4:65:ed:68:23:d9:40:d2:24:b9:1a:7d:7c:
c7:20:a0:55:ef:2d:2a:39:02:91:88:c3:47:6d:fb:e8:09:a9:
eb:52:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:59 2025 by rpki-client