Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b340895-948d-349a-904c-52c43040e6ff.roa
File: 4b340895-948d-349a-904c-52c43040e6ff.roa (raw, json)
Hash identifier: ysUg8ih9G8Q2hNdfWtg6ibzH7V3wJOdXbGZYxlwI7h4=
Subject key identifier: CE:1E:14:8E:C2:E4:F7:55:40:16:58:AB:F1:94:47:EB:9B:E5:1F:38
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C135347D26FF90057F4AE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b340895-948d-349a-904c-52c43040e6ff.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.6.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:53:47:d2:6f:f9:00:57:f4:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3a1950ca-80ab-4838-b164-81f3eacde116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:83:11:48:db:ac:ee:f9:be:96:9b:bc:3d:
51:18:61:5b:1f:ee:5a:72:8f:f3:48:d0:2b:db:bc:
c6:98:73:1c:56:93:41:44:82:63:58:ad:75:69:55:
50:6e:a9:0c:28:0b:56:69:9b:db:e9:51:cb:fc:e6:
f1:b9:27:4b:51:da:ff:a5:3b:19:0c:f7:2d:d0:01:
56:02:32:fd:b8:a7:c2:27:4e:29:52:eb:48:5e:04:
95:ac:4f:cc:c1:26:6c:2a:2b:b0:24:55:18:50:7f:
22:a5:6f:65:0f:5b:bf:a0:1e:b0:ce:c0:a1:f8:e8:
c1:f0:8a:6a:8c:c9:6d:2f:b0:68:0b:5a:38:95:d0:
23:d9:f1:7b:cc:8d:3f:52:2c:de:fe:27:e2:c8:2e:
3b:3f:fb:eb:25:f0:a5:9a:d5:d7:27:d8:8c:eb:32:
04:96:11:54:98:5d:a2:c2:2e:e0:ec:67:55:25:88:
c6:4f:ba:6d:b6:ad:f1:31:43:e8:73:7c:8c:85:10:
4e:5d:e7:35:89:bf:f1:24:d9:e0:12:b6:f6:97:3b:
9f:b8:69:5a:e9:76:22:7b:82:3e:1e:7b:cd:5e:1b:
e4:c1:04:cc:f7:d4:d2:7c:96:f1:b3:70:e8:90:3a:
54:39:e0:03:ec:a6:cf:90:b3:cd:f5:db:6a:6b:d5:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1E:14:8E:C2:E4:F7:55:40:16:58:AB:F1:94:47:EB:9B:E5:1F:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b340895-948d-349a-904c-52c43040e6ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.6.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:41:ac:d8:1e:ed:88:c2:a9:bc:06:1e:71:81:44:2a:49:e9:
32:e2:f7:a2:9f:85:a9:83:6d:b9:f2:84:28:4e:22:37:25:37:
17:b4:37:61:9b:cb:52:ad:53:b7:53:d7:b7:a2:3a:61:54:81:
96:8e:f4:0d:9f:a6:7d:02:0f:2d:6c:9a:8d:83:f3:0a:53:b8:
d6:7f:96:21:40:27:4c:20:f5:b7:6f:95:92:d0:0d:19:bf:1c:
a2:a3:92:8e:1d:54:1c:f3:d9:a3:6c:1c:7b:32:b4:0a:87:0c:
71:9d:da:7e:ca:4a:cb:ec:cd:a9:cf:12:11:a4:c1:9d:a8:23:
89:05:75:e9:e4:73:ca:d8:9a:47:d9:78:c8:cd:5b:7c:7a:5b:
95:ab:42:30:b8:7d:6e:d4:89:20:26:2f:e0:68:3c:bf:0a:4c:
9e:7b:0a:8b:d9:0b:eb:6b:f4:2b:f8:6e:ba:a2:c4:02:d8:2c:
1b:a3:ac:92:d0:0d:05:4c:07:0c:6f:59:d7:ec:d9:f3:7f:1c:
15:27:90:ac:cb:e4:ef:b2:92:0d:8f:22:d8:e9:59:49:20:12:
c4:34:8d:07:7c:68:a6:33:70:2a:ab:17:a9:7b:8e:6a:78:c0:
26:08:38:5e:41:5e:a1:48:22:7b:5a:6b:c4:44:39:c3:05:f8:
32:54:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:32 2025 by rpki-client