Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa
File: 5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa (raw, json)
Hash identifier: QVrDqyeBCYXKZupo5cClQ9QCb8zIGhaaCs0zM2NQh+Y=
Subject key identifier: 18:78:95:3D:85:06:BC:CA:9F:5B:E5:BE:DE:3E:B7:6F:B5:80:B0:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C117B11756D1352B4227680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.6.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:7b:11:75:6d:13:52:b4:22:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ba9c92a2-5840-4ece-a4f6-88e89653aeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:8b:b4:46:d3:bd:c5:be:36:9e:49:cb:7b:
1b:ad:87:96:cb:54:28:b7:71:2a:24:bb:1e:30:1d:
f4:4e:bf:4c:85:a4:df:66:f2:c0:9d:0f:41:5c:d9:
d4:28:c1:9a:78:f3:a9:98:53:97:12:bb:ef:d8:1c:
9e:da:61:51:db:6c:e8:0e:73:21:5b:7a:f6:ac:66:
27:d4:71:2c:e9:80:85:db:6c:03:f5:ac:9e:05:f1:
f7:8e:82:8d:d0:54:eb:08:18:c3:e3:6b:eb:df:2c:
3b:9a:ed:91:66:66:fe:84:2f:ee:3c:3f:a8:d8:ac:
58:fb:00:fb:f9:2e:70:b8:26:ef:41:8b:55:e7:f7:
e7:9b:d6:ad:52:7a:9c:05:83:16:00:96:43:1a:d7:
4d:ed:d3:ff:00:45:1d:2d:79:90:80:8f:0b:57:d9:
c5:9d:77:61:04:1f:09:f9:be:23:ef:cf:f6:5c:a3:
78:30:b8:21:81:03:e2:e0:90:57:08:0e:5c:55:73:
bf:6c:e3:73:39:7e:e9:5c:d0:03:a4:6b:79:0a:b8:
6a:85:6f:24:35:ee:c9:7e:f8:1d:14:b0:bc:c5:85:
3b:08:c7:ac:9c:b5:8e:16:bc:81:71:61:f5:9f:6f:
c8:5e:0a:8b:04:df:ab:ab:6d:f0:7c:0f:e4:94:76:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:95:3D:85:06:BC:CA:9F:5B:E5:BE:DE:3E:B7:6F:B5:80:B0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.6.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b4:a3:fd:9c:49:88:84:80:a8:ea:53:73:dc:5a:cc:de:f6:
06:94:7c:2e:b7:af:04:94:a5:a3:97:ba:ca:42:d1:54:6c:c0:
90:3a:0a:1f:96:1e:90:56:2e:97:97:28:70:6c:ff:42:83:e0:
62:a8:0d:43:88:02:af:af:98:bc:65:33:1c:01:5f:c5:b2:1d:
f3:9a:cb:3b:90:da:f2:57:c0:d6:88:aa:bb:91:48:99:a1:e6:
05:88:8a:7f:f3:e0:e1:0a:e1:b9:5f:d7:fc:8a:29:7d:e4:6a:
14:7f:bb:68:25:ac:c3:0f:c1:28:88:20:6b:41:d8:62:40:82:
fd:5a:3e:2b:1c:18:82:d3:2f:32:c8:a2:46:ed:ac:b7:dc:45:
3a:d1:14:d8:d5:4f:ef:69:dd:0e:2a:fd:e0:53:b1:28:ae:93:
d1:83:15:59:df:46:4e:01:5c:f5:d2:9d:8f:76:41:66:05:0a:
2c:b9:8e:9a:52:ca:ef:62:0e:8f:21:ec:14:da:14:b9:0b:6d:
c7:33:41:cb:8e:ab:08:ec:e0:08:18:dd:99:76:67:55:ae:62:
5f:f6:2e:b9:24:6d:e6:35:8e:b9:0f:67:bf:e5:82:da:a6:22:
2b:22:46:a5:a8:c5:a7:20:0b:ee:7a:94:5b:9b:58:79:ba:40:
7d:e0:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:14 2025 by rpki-client