Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61b6e3a2-2d61-31d5-9cd8-ea6787746a03.roa
File: 61b6e3a2-2d61-31d5-9cd8-ea6787746a03.roa (raw, json)
Hash identifier: VlKDEibrLkTSN2QtlIEM7YF3F/D1VHv0YeCkOrY8q3I=
Subject key identifier: 80:B7:EF:3A:BC:C0:95:E5:25:B2:37:DB:B1:1E:3A:B8:33:04:8C:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1269513DFE42211AB64D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61b6e3a2-2d61-31d5-9cd8-ea6787746a03.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.14.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:69:51:3d:fe:42:21:1a:b6:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=fb34c065-ae67-4701-aba9-f5ea0a46de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:19:72:91:cf:3c:4b:40:9e:14:64:e8:f3:
58:a0:27:ce:ec:11:98:18:ad:17:95:c1:13:73:d0:
7f:98:6b:e2:e6:55:c6:57:5c:47:bf:42:69:e4:2a:
3b:2c:af:0c:f3:6e:63:41:b0:f1:24:d4:99:3c:4a:
08:fa:8b:f7:cf:50:3b:34:41:be:d4:b5:d9:89:6c:
b5:d0:58:91:44:8e:75:4b:cc:8f:43:e5:85:98:c0:
c9:a0:ed:1a:5b:80:cc:fe:51:45:70:ee:d5:44:97:
f2:e1:1e:ff:02:fa:02:97:11:68:98:07:e6:a3:c5:
49:e4:19:79:58:cc:9d:81:11:d0:f7:c1:46:1a:ae:
5d:d3:45:07:35:2c:93:8a:fc:8f:69:1c:0e:ae:d5:
6d:ed:b3:b9:05:c2:ae:cc:9a:d1:e4:1d:07:a6:c5:
72:06:e7:b1:7c:77:96:ab:19:fd:b7:91:2a:a3:95:
a1:4a:d9:c5:79:8d:fe:28:7d:20:0f:7c:55:d8:18:
24:78:98:b3:f7:88:f5:6c:96:1a:cf:f4:1b:d2:6c:
d0:79:3c:c9:83:0d:db:47:7a:b2:06:52:8d:74:ea:
4d:72:c2:5d:7a:38:c1:0d:14:87:30:0e:10:e8:4b:
20:a6:a9:86:37:8d:c4:cb:39:11:07:eb:ad:f6:10:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:EF:3A:BC:C0:95:E5:25:B2:37:DB:B1:1E:3A:B8:33:04:8C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61b6e3a2-2d61-31d5-9cd8-ea6787746a03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.14.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:bf:e5:ad:27:a7:d2:b6:6f:ee:57:1f:67:88:0f:95:a4:4e:
f7:20:0d:75:40:b7:2c:67:29:e0:c5:69:b5:6a:d2:3c:cf:82:
ea:9c:4f:4d:da:ac:e0:3a:c1:e2:58:5d:a1:b1:a2:84:00:96:
0f:8b:e6:5b:6e:ba:62:ff:64:9b:37:43:bb:d6:16:ef:ab:f5:
1b:21:2d:a3:8e:b1:8b:07:5a:8b:0f:cf:76:50:48:1b:23:99:
ba:b0:d9:45:fe:4a:9e:a9:ef:60:0e:a9:c2:02:53:f6:a8:b3:
0e:93:73:c7:1d:11:f4:6b:5c:5a:8e:3f:99:72:24:d6:f3:cb:
a4:de:22:97:3d:15:e3:70:a0:f2:4d:43:6c:7e:2a:a9:6f:38:
f1:9d:85:78:3a:9a:c5:a7:96:d7:0d:b3:40:ce:e3:3d:f0:d0:
9b:5a:a0:d9:38:66:87:9f:0a:3e:1e:83:78:e2:57:af:58:93:
4a:a4:25:33:ce:94:b9:11:df:f3:12:9e:c5:ce:9e:3e:4d:71:
2b:9e:77:84:41:46:3f:b1:59:d2:37:4f:98:8b:e2:de:b4:df:
86:90:7a:b6:22:e9:35:73:6b:16:bb:bb:d3:8b:68:61:fd:1d:
0f:be:11:28:c9:a7:a2:3a:22:04:be:ef:9a:99:c7:36:cf:5c:
99:45:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:28 2025 by rpki-client