Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa
File: 66de522a-54eb-3da6-8e58-af92f7ba0a15.roa (raw, json)
Hash identifier: MbG7ZzJXUievvhpmKb+IR3srWuvcYjkh4w5Y+1KxQT8=
Subject key identifier: 1C:B5:08:A2:35:D8:CA:51:E4:FD:C8:5B:8E:4A:6B:A0:51:B9:34:B1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10C85E0E981373861A4C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.14.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:c8:5e:0e:98:13:73:86:1a:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f736ea5a-abbc-4036-94e2-1234758f798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:27:a7:8d:71:ef:a6:da:52:68:9b:63:09:
6b:ff:73:66:e1:1c:bb:a0:e6:1f:61:80:a7:ce:78:
a1:88:05:d1:b2:9b:f5:8d:67:80:83:3a:00:70:ee:
15:ec:fd:6e:1b:0c:85:d7:fe:65:6b:20:92:ad:f3:
e4:90:36:25:f5:74:64:04:54:36:23:33:eb:f3:73:
41:10:49:d4:07:13:20:03:0d:ca:66:d9:9a:52:a1:
af:c4:56:10:fa:05:e4:b9:d4:a1:3a:84:4e:08:cc:
c5:5b:f5:52:8b:7f:2a:18:e5:1f:d6:19:70:a0:ca:
8f:5b:0a:e7:66:d4:b7:64:d5:eb:a6:17:cd:66:1d:
f8:24:a1:6f:d3:3f:89:6f:37:be:2d:bf:8b:68:76:
d0:38:53:42:96:d3:92:8e:50:eb:c3:ed:5e:96:e8:
21:bb:9b:3d:e7:b0:62:2d:33:7f:a8:22:dc:c6:5a:
4e:b7:3a:9a:0b:fc:4e:53:73:e4:79:b5:b1:69:2b:
b4:4e:c9:e1:85:2d:b5:cd:e4:10:94:39:fa:a6:0a:
ab:33:22:c5:7d:37:e2:86:64:1f:30:07:e0:ce:81:
22:d2:6a:74:b1:78:61:4b:b7:7c:96:03:2e:d5:10:
14:41:c6:bf:b2:23:09:35:fc:ca:dc:73:e7:0b:52:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:08:A2:35:D8:CA:51:E4:FD:C8:5B:8E:4A:6B:A0:51:B9:34:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66de522a-54eb-3da6-8e58-af92f7ba0a15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.14.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:39:39:c7:9c:6d:33:3a:79:7c:49:d9:a8:91:2f:a9:02:74:
59:e5:eb:e7:4c:cb:e9:44:95:4c:6b:d9:fc:f3:03:64:7a:66:
48:37:86:ba:c7:38:be:7a:9e:33:ea:d7:83:a3:c7:2b:1b:da:
2a:32:8b:56:d5:83:d9:0f:91:f7:da:b1:c5:7f:87:63:57:c5:
7b:0f:23:46:46:c5:40:e7:02:71:0b:0e:00:b2:ee:92:09:8f:
f3:8a:2e:87:f0:c0:fc:99:8a:6a:b5:47:f9:bf:b6:ad:d4:dd:
a7:f4:fc:89:30:ef:56:60:1b:bf:dd:fb:7d:04:29:66:26:70:
89:b7:a2:87:d0:70:75:a3:49:3c:5a:ee:2f:97:58:77:99:3a:
3f:e5:4c:05:03:49:fd:51:cc:6f:7a:c1:a1:d3:5a:93:3f:a0:
82:a1:e0:ce:db:ea:1e:28:ab:60:84:d3:a1:72:2b:88:43:ca:
e4:22:0e:06:27:83:e8:64:db:da:35:19:a6:c6:8a:5f:b3:27:
5e:2b:58:5f:5a:9d:06:4d:9e:9a:ec:9e:fc:12:74:fa:c8:30:
2a:dd:d2:3f:58:35:b0:61:c7:85:5e:9b:34:1a:5c:71:76:e6:
82:13:21:92:b5:c2:fb:03:7c:03:01:82:2e:aa:30:97:93:f1:
d8:9f:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:55 2025 by rpki-client