Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d26f1c7-e67e-311c-bb92-f4ba76897c29.roa
File: 3d26f1c7-e67e-311c-bb92-f4ba76897c29.roa (raw, json)
Hash identifier: 9S/XrIGc8YDnpTtcUGXezRLNHVp1wxBTUenX8FIwolg=
Subject key identifier: B2:A0:05:9E:73:C4:F8:B2:32:7C:6A:4E:5F:83:68:A9:3F:CC:C7:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CEF3FCCF51BB80320DFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d26f1c7-e67e-311c-bb92-f4ba76897c29.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.21.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:ef:3f:cc:f5:1b:b8:03:20:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1a65859b-b64e-4d7b-aa17-e8ed14c0c430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:c9:2e:eb:32:41:83:ec:ed:3d:7e:ff:19:
5a:1b:3f:b8:d6:83:d4:d9:11:a3:5e:5e:f2:c2:63:
b3:2f:47:a9:5e:06:31:ae:59:09:af:a1:5a:39:de:
a9:a1:d8:de:cd:16:4b:14:b4:1b:01:52:81:72:07:
b0:fa:eb:6b:d2:8d:0c:27:0f:14:d2:3e:41:a8:f8:
03:ae:68:44:ce:2c:67:17:77:f5:3b:46:1c:88:1f:
60:f2:d7:73:e0:96:d6:97:60:2e:bf:d9:1a:e4:84:
fa:3d:d8:0c:8b:d8:37:64:fb:76:d8:d0:14:42:4b:
ac:c0:8d:e5:07:16:17:74:3c:90:e4:aa:9f:fe:20:
a6:6b:8a:d0:0c:ac:b3:4f:a9:1a:f5:35:cc:68:cb:
f4:28:0e:aa:39:bc:90:55:f9:21:6e:21:69:8f:e3:
8d:c2:fa:d4:9a:45:93:89:f5:88:ee:1d:b4:10:6c:
28:8b:18:c2:77:8b:59:ba:e7:30:1f:49:12:ae:80:
75:9b:a0:3a:64:0e:e4:dc:cf:22:0d:86:43:a2:9f:
ce:30:f6:42:fd:80:39:7a:69:1b:2a:33:ea:a2:03:
d8:27:ec:93:84:d0:94:36:f0:75:6b:0a:c8:23:32:
e2:aa:fc:8d:20:f3:fa:ba:41:b5:de:f7:38:c7:b3:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A0:05:9E:73:C4:F8:B2:32:7C:6A:4E:5F:83:68:A9:3F:CC:C7:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d26f1c7-e67e-311c-bb92-f4ba76897c29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:71:f4:4d:d1:37:60:8f:f8:35:f6:c2:7c:11:d5:bd:25:e6:
b8:73:00:52:64:8f:0a:ca:7b:69:08:5a:f5:aa:46:e5:3f:75:
b8:65:61:b6:8b:af:67:5b:bc:64:b8:13:23:51:4c:60:7a:53:
81:60:68:c7:08:e9:5c:de:65:20:4b:49:f2:23:a2:14:ec:c5:
f7:b6:70:18:05:fd:f2:22:ce:05:ad:6b:8c:32:61:a5:4b:3e:
fe:f6:07:4a:52:6b:f0:1c:ce:21:ea:fc:b5:da:74:69:f4:68:
b4:b2:37:df:f9:f8:fd:1a:29:a3:99:53:74:8e:38:17:33:30:
a6:73:fe:77:2f:83:b7:6c:f3:c2:7d:ae:74:c7:96:b8:8f:fb:
27:4e:6f:8f:ab:ce:6a:ca:ad:e0:6c:06:d4:84:2a:02:26:b9:
06:5a:a1:5f:fd:c0:e0:15:32:51:f8:51:2d:04:26:0f:82:1b:
3e:39:0f:f7:0c:22:8d:5a:6a:97:39:58:5d:06:c6:73:a5:bb:
52:36:a9:a2:28:57:19:5b:78:41:e5:d5:d4:ed:a7:28:12:b1:
dc:5d:8f:77:a3:fb:4a:ef:13:19:fc:81:2a:13:0f:1a:d9:5b:
a2:ca:2f:c4:ae:dc:0d:76:31:01:e1:9c:42:6d:32:4d:1e:f8:
83:e3:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:56:01 2025 by rpki-client