Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b7fdd6f-8aef-367f-ae99-bec90a774173.roa
File: 4b7fdd6f-8aef-367f-ae99-bec90a774173.roa (raw, json)
Hash identifier: igxrEcBpYpCTDYUcR3qUEsUMT+G0CDfNvmDiuBwsVAw=
Subject key identifier: 90:40:48:3E:90:F8:76:13:6E:ED:76:59:66:FF:88:31:09:87:58:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1178C39EFF18FBE3728180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b7fdd6f-8aef-367f-ae99-bec90a774173.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.5.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:78:c3:9e:ff:18:fb:e3:72:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=de7c8733-c110-4789-9dae-40e45659addd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:38:46:76:b3:88:b1:cf:81:8e:30:ac:ab:34:
ec:a3:b8:3d:76:6a:f9:44:0d:79:8f:1c:3b:3b:61:
15:40:c2:d9:8b:47:60:39:7d:cc:37:f3:64:41:47:
f3:c8:1f:92:97:14:c1:db:ed:34:b9:6d:08:3a:16:
bd:4b:3a:49:a2:6d:91:31:38:59:6e:d5:3d:96:7a:
50:5b:d8:f7:2a:74:bd:8e:7e:8e:71:f3:9a:80:b1:
58:50:c5:f0:ff:64:fb:ab:51:3f:74:14:89:9c:07:
f5:7e:c2:bd:72:21:d4:15:db:01:49:0a:d2:a1:93:
f0:d8:c7:4d:5f:c1:5b:65:1b:f6:ae:d1:ca:84:80:
c1:27:0f:64:32:6d:f7:f7:bf:e6:2f:9e:3f:eb:e7:
0f:1b:d5:b5:f4:6a:e3:08:53:a7:88:e3:cd:2f:df:
9f:dc:5c:54:94:b6:94:bb:f6:f5:08:5e:f5:a4:c1:
85:5a:fd:8d:a4:24:81:2e:f0:6c:8f:79:39:e7:ff:
98:49:99:ea:72:dd:6f:c8:6c:31:c9:d1:65:52:e4:
ae:b3:25:de:ff:a9:43:c9:c3:53:a2:e1:90:26:30:
9a:e3:98:5f:5b:3a:7b:e3:4c:f7:09:94:46:c3:1a:
f6:96:cc:57:63:07:af:2f:2b:8a:1b:1d:cd:13:30:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:48:3E:90:F8:76:13:6E:ED:76:59:66:FF:88:31:09:87:58:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b7fdd6f-8aef-367f-ae99-bec90a774173.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.5.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:87:2c:74:d8:27:63:34:8e:40:2f:fb:45:f6:d8:ae:8c:91:
f6:e7:86:c9:b4:b8:f0:f2:69:bb:70:4f:82:e1:7e:94:e6:60:
74:a3:f2:31:4f:c3:6d:8f:a4:d9:5b:3e:cd:0c:cb:05:57:00:
d9:73:b0:26:24:12:69:fc:23:e5:43:fd:ac:9d:e5:f2:9b:ca:
26:3f:e6:d7:68:37:9c:da:b3:2d:07:43:30:db:4f:ce:77:d6:
50:e2:8a:03:9c:9a:38:f4:0c:2d:90:c1:e5:34:ab:79:35:ec:
26:8c:98:ab:4a:d2:a4:c0:75:09:38:10:b3:f2:ef:5f:32:f4:
3e:92:6f:1f:18:61:aa:cf:49:07:e5:0c:0e:a1:2c:6d:ae:0f:
49:47:91:f2:8f:bf:45:58:ed:f2:35:5d:16:2e:35:fa:a5:fb:
a8:64:32:bc:66:02:f9:8e:87:c6:57:56:0f:c2:4d:c5:cc:2f:
5b:12:21:a0:fb:8b:ad:98:c0:29:86:0d:2b:74:e1:a0:ef:9e:
85:5a:b3:e9:5f:6c:87:74:76:d4:51:94:06:9c:e3:5b:1e:cc:
14:19:0c:55:fb:0d:c1:b3:29:cf:58:d7:0d:a1:8d:c5:b1:f5:
93:17:bf:92:7b:3b:77:66:1d:c2:9f:5a:9c:44:90:46:9f:11:
eb:94:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:37:55 2025 by rpki-client