Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa
File: 5aa89212-3d33-3052-97d6-991ea1d1130d.roa (raw, json)
Hash identifier: VrFPiGwEYlrEO/Gboap2XV2RvdQ8dbJqgo1ys9QcU94=
Subject key identifier: C9:97:EC:F8:A1:1E:38:D4:C7:5A:7C:99:0E:C1:17:5D:3F:48:A0:B9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10C388726883204A8D7840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:c3:88:72:68:83:20:4a:8d:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=515c63db-17d1-4b3c-bc9c-401d366904f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:60:46:0b:73:c0:ca:b9:53:80:f6:ac:1e:
cc:90:31:d1:2a:7a:a6:d2:9c:f8:56:f3:bf:c5:f3:
94:e9:13:1f:4c:2d:62:5d:cc:5e:da:60:ec:75:6b:
62:af:ec:4b:5c:f9:bb:f2:61:ac:2c:62:23:71:f8:
4e:7c:91:a8:44:93:21:9b:72:ac:a9:6e:8f:d7:7d:
25:4e:2e:f6:c5:af:96:8a:51:16:56:08:15:89:dc:
ea:1e:3c:14:0d:4a:f9:bb:0c:56:37:44:74:08:d2:
39:c1:93:e9:dd:5d:97:af:68:05:15:fe:69:31:99:
9a:3a:d8:5d:1d:ef:5d:86:70:24:26:24:c3:d3:0d:
80:02:02:1c:64:d6:d8:9b:a1:fc:e1:d6:5c:5d:9b:
12:5b:41:5e:7b:9b:bd:47:1e:79:dd:ca:6d:de:0f:
8e:83:4d:f2:05:3a:d7:a3:48:a7:c0:f6:4b:69:0e:
dd:4e:10:56:36:91:45:d2:58:8d:44:16:70:04:72:
d8:96:d3:d0:e6:19:0b:0a:ba:3e:92:51:c3:c8:87:
6f:39:db:83:92:b9:77:7a:5b:e0:36:d5:07:52:39:
e4:1e:6c:1f:5f:55:d8:5e:ec:42:32:41:d9:5f:7f:
01:dd:36:c7:c0:66:b3:c2:4e:56:90:e2:a6:89:fa:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:EC:F8:A1:1E:38:D4:C7:5A:7C:99:0E:C1:17:5D:3F:48:A0:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ff:9b:af:b1:d0:1b:31:e6:90:9f:f5:e9:8a:ab:de:0c:b5:
3c:68:5d:d2:6c:2f:42:25:ad:00:1d:43:b1:5d:7b:95:0c:36:
aa:3c:1d:79:70:9c:1a:10:54:eb:fd:9e:6c:e7:b2:1a:cf:b9:
d4:3a:d6:6d:d9:73:da:7a:ef:9e:0c:62:74:6c:82:1d:b1:df:
56:f7:14:be:6e:e0:04:1d:df:7d:df:6f:6f:c3:73:64:76:29:
7c:4c:18:62:68:ee:76:fd:4f:57:31:99:1a:56:e2:c6:eb:bd:
6c:ed:c8:9a:f7:8b:9f:80:78:60:1b:12:4b:86:fe:0e:7b:db:
9a:79:ec:62:58:e2:10:0e:61:ca:2c:6b:c7:93:40:a6:4b:0a:
15:87:21:e4:ae:d4:2a:61:d2:aa:1e:4c:5e:05:86:21:71:ff:
9e:fb:21:62:0b:91:c7:cc:6f:1d:c6:21:59:75:c1:11:72:81:
bf:27:3b:ca:88:69:37:6d:bc:d3:82:d7:ed:9b:52:e0:d0:a8:
c8:38:eb:cc:56:8b:65:4a:f3:55:89:23:a8:5e:72:27:24:7e:
18:17:2c:7a:37:4a:66:eb:45:52:dd:5a:4d:1d:37:33:ea:9f:
7c:4b:c1:db:ad:94:42:50:ea:e9:af:ff:03:84:68:92:22:23:
42:64:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:32:10 2025 by rpki-client