Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aac6529-b3c3-34a6-9ca9-1a994e99b625.roa
File: 4aac6529-b3c3-34a6-9ca9-1a994e99b625.roa (raw, json)
Hash identifier: NeTsNxyrj4qe8DQH7sIp5b+dZdmZ4W6q+DXO7fyHCis=
Subject key identifier: 9E:B1:5C:6E:16:85:85:F3:8F:D8:3A:AD:C1:55:90:00:FD:E5:DC:CA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C103C3944092C847F09E1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aac6529-b3c3-34a6-9ca9-1a994e99b625.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.11.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:3c:39:44:09:2c:84:7f:09:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=95354df2-f37f-492d-ae6d-282fd7fd4740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:52:e7:8f:f8:1f:d4:49:f6:a4:82:e5:b3:
c5:9c:74:62:ec:f9:17:f7:99:37:7e:86:9d:93:1f:
bf:94:e5:57:87:e1:00:bc:82:48:0e:94:92:2c:df:
f7:ca:2f:76:6d:3a:a3:a1:44:4e:a1:cd:7e:05:b7:
33:ac:4f:af:b4:0a:75:c3:dd:95:5b:42:5c:75:70:
a3:e0:01:b5:88:95:5c:09:4c:62:56:62:0b:75:1c:
ce:36:c7:8b:67:4d:74:d8:7a:ed:f4:42:50:6b:d2:
21:04:7e:08:d2:d7:47:34:25:10:15:bc:cc:ab:4f:
2a:79:1f:3b:12:d6:1c:ce:a7:26:59:21:08:4c:6b:
b2:c8:29:48:70:41:88:6f:e4:f3:4b:85:99:36:5a:
77:60:55:63:08:7b:4f:c2:c2:10:f6:f6:00:7f:6b:
f7:d1:7c:11:f7:22:31:a5:1f:45:42:3c:d1:20:29:
c5:3d:fe:25:47:7e:da:dd:61:44:f3:f5:25:1e:88:
e9:13:04:f1:c0:46:4e:41:dc:ad:7b:a9:c7:03:ba:
15:b5:59:5f:8f:63:6c:64:5f:b0:9b:1b:bf:61:3f:
4f:5e:36:63:b0:c7:89:0a:2b:dd:a0:77:98:79:ff:
c4:b3:c2:c8:7b:ef:45:b3:a2:8a:46:cf:27:da:51:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:5C:6E:16:85:85:F3:8F:D8:3A:AD:C1:55:90:00:FD:E5:DC:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aac6529-b3c3-34a6-9ca9-1a994e99b625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:47:46:13:3e:77:f7:5b:3d:89:b0:6d:af:5d:14:d0:39:86:
62:0d:28:0f:fb:aa:ba:c9:40:6a:18:a2:ea:26:f9:45:c8:f2:
92:e5:4c:94:79:08:92:a2:59:6d:de:71:2e:50:ef:50:e5:f2:
52:a8:a2:d3:4f:47:e5:3d:09:b4:a4:94:c4:d3:37:4c:5b:71:
a8:9b:0c:dc:46:a2:73:da:96:da:5d:e7:e8:59:17:74:4b:7b:
6c:00:e5:8f:77:cd:43:b7:8f:fd:38:ca:85:5f:db:cf:d5:92:
df:f1:1c:75:7d:47:8d:bb:08:42:b1:35:d7:4a:33:5a:85:ac:
8a:97:b3:14:ad:a4:a6:e5:91:45:91:cb:67:2b:5a:3e:b6:c0:
27:80:37:c4:b2:dc:ba:45:38:fc:e5:19:e8:93:7d:ef:6f:14:
a5:9a:cd:dc:a0:4a:f1:2e:23:a1:de:41:d7:4c:99:85:f9:19:
00:8d:89:46:9e:3c:fc:61:36:98:a2:95:d0:58:77:6e:16:14:
bb:00:9b:0f:9b:22:a7:ca:e0:f7:14:d2:de:48:32:7e:fb:06:
d4:17:92:c8:f7:35:95:7a:ef:06:03:74:d4:2c:b7:0e:44:46:
30:7e:37:60:91:55:33:dc:42:01:5a:14:44:bf:00:95:af:a7:
e3:da:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:23 2025 by rpki-client