Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/509d2cfe-fe10-35da-8c68-bc435c44bfab.roa
File: 509d2cfe-fe10-35da-8c68-bc435c44bfab.roa (raw, json)
Hash identifier: LUM9xYn25XjHhXSW0gINSfFESNIx43cvskKjg4wTbQU=
Subject key identifier: 06:E6:11:44:CC:37:C5:E0:54:51:CE:B5:BC:CB:E5:A7:F8:41:2E:B3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C133BD8EEA0475625238A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/509d2cfe-fe10-35da-8c68-bc435c44bfab.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.23.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:3b:d8:ee:a0:47:56:25:23:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=56423f46-374f-4bc7-9bca-2bb0e05c5e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:50:f8:d6:06:4b:f5:fd:b6:c1:34:17:10:
49:56:ff:47:e8:67:3c:f7:f0:9b:f3:e3:4a:c2:3a:
89:a2:9b:cd:f3:0c:4a:02:ae:38:00:8c:43:de:cc:
fa:cd:ec:30:a2:be:ba:8d:ba:e1:0e:6f:76:46:32:
74:a9:21:42:de:80:ad:2f:45:28:2b:15:da:f7:bc:
11:58:0d:df:cf:79:a6:b4:5e:c1:8f:2a:ce:b5:83:
58:73:c1:4d:65:3d:11:5b:c0:54:02:44:80:f9:75:
fc:bd:48:40:7a:10:6b:64:87:46:9a:ba:f5:a4:a5:
44:c5:41:59:7b:a3:82:da:39:69:cc:56:09:70:6a:
b7:bc:39:3a:b0:1b:16:00:db:3c:85:81:9b:4c:e7:
f4:5d:de:a8:17:3b:af:46:df:37:de:76:f3:6f:58:
4b:15:32:dd:77:13:a7:4e:60:5c:27:4d:12:ea:0b:
a7:ff:c1:eb:48:12:4b:01:1a:6d:60:ef:4d:14:89:
9a:dd:ea:ac:1f:02:cb:4b:f3:13:5f:c3:b0:41:0e:
d8:3e:1c:ba:07:1e:1c:33:59:3e:2e:d7:de:e8:8c:
4f:54:cd:12:cf:67:5b:a5:14:6e:7b:f8:d6:f3:34:
24:93:9e:b5:86:33:6e:48:ef:fd:84:06:ad:b4:44:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:11:44:CC:37:C5:E0:54:51:CE:B5:BC:CB:E5:A7:F8:41:2E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/509d2cfe-fe10-35da-8c68-bc435c44bfab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.23.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ed:17:32:98:a7:7a:6e:e4:2e:47:ba:f2:21:b6:b7:b8:d7:
7b:8d:d3:67:61:8e:32:1f:7d:d4:a9:54:16:01:62:12:db:63:
44:5c:97:a4:ed:16:f6:bb:fb:5f:21:dd:5f:c3:b6:ca:a7:a9:
b7:ec:91:b2:bc:82:76:51:8d:a3:80:c7:d9:8b:77:26:52:99:
f7:7a:4c:a8:ff:af:c9:ed:fc:5d:2c:e2:ae:6a:1f:ec:a1:7c:
de:4a:d7:ec:e3:9d:a6:ee:18:05:27:2b:05:80:3e:9e:d1:40:
0d:87:49:a8:81:86:2b:cf:52:4e:df:14:ab:1c:fe:65:0b:70:
e5:f8:36:38:41:9c:b9:d0:ba:b8:38:e4:36:bb:05:dd:22:a0:
be:f3:c4:b8:a2:49:bf:89:99:d2:1c:ba:5a:0c:7b:79:2e:8f:
09:69:9b:a8:d0:c7:0e:a2:76:05:4f:52:5d:de:d2:bc:0e:23:
68:2d:15:5f:72:4a:02:1c:08:eb:80:00:95:cb:b6:64:9b:fc:
41:c5:97:77:79:1d:15:6e:0e:fb:1b:ea:d4:ca:33:5b:2e:8c:
f0:09:c1:51:e9:a6:89:a5:04:07:b2:4e:7c:8e:0a:40:bb:d1:
a9:e8:00:f8:7e:c3:47:53:00:d1:74:8a:84:cf:d9:38:ea:3d:
4d:f5:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:53 2025 by rpki-client