Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c9b85f5-a92f-3c19-a2a0-3d0397a97ac9.roa
File: 6c9b85f5-a92f-3c19-a2a0-3d0397a97ac9.roa (raw, json)
Hash identifier: yDTx3RlYq+2kaQ0xZIZo75Lb9Rt+r9FRuJGQwPxQDlA=
Subject key identifier: 01:7A:81:09:E1:AB:64:29:57:B8:83:20:3F:B5:84:43:F0:1D:46:68
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CA0115C7EA679DCD068E
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c9b85f5-a92f-3c19-a2a0-3d0397a97ac9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.15.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ca:01:15:c7:ea:67:9d:cd:06:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7a80f3de-7a93-47c5-9f6e-ea6568fc01f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:ad:01:b1:ef:6c:38:c7:5a:b9:ea:60:08:
bf:d2:e1:22:e0:dc:30:d8:50:39:e3:84:fc:df:5e:
e3:fc:93:4a:8d:7e:d1:00:be:6d:ab:e4:94:c8:c9:
c5:e8:aa:04:f6:6a:97:96:d1:a2:29:7a:fd:16:c5:
27:ea:20:74:09:71:e7:b0:89:68:5c:27:14:95:60:
a6:a8:64:34:ff:f5:8e:91:24:be:60:31:0f:29:0b:
7f:9a:37:c7:9e:80:ea:b1:3c:27:7f:64:38:b6:39:
5e:ec:e5:c1:4c:6e:5e:3c:c3:89:bf:df:1a:08:04:
9e:08:71:a6:65:44:de:83:dd:84:91:8b:3a:f5:45:
33:f1:85:9d:c4:1e:7b:25:3b:83:c9:36:a8:88:ab:
f3:73:9e:33:76:92:40:97:5f:8b:0b:17:b3:7b:30:
b8:9e:79:65:11:c9:66:16:0f:7f:52:83:9f:ca:4f:
6a:cd:46:d1:21:9a:bb:af:75:e3:03:c4:00:53:cc:
07:6f:24:67:9c:70:45:34:d1:03:a5:08:d7:bf:7e:
25:07:87:01:a9:40:e8:db:b0:7f:ea:7f:df:f3:38:
46:79:50:fd:47:84:7d:50:57:4f:59:f4:33:81:fa:
a8:24:ae:4f:79:75:dc:6b:d2:3c:29:e5:66:54:77:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7A:81:09:E1:AB:64:29:57:B8:83:20:3F:B5:84:43:F0:1D:46:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c9b85f5-a92f-3c19-a2a0-3d0397a97ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.15.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:18:d9:56:44:ca:f3:b5:60:9a:91:d3:32:e4:54:16:7e:92:
49:f7:1b:0c:99:5e:38:60:8e:77:20:86:a8:ca:c4:ca:17:4c:
56:15:b3:97:49:21:d2:62:83:0c:47:4c:c4:5b:63:a3:ea:c1:
c1:07:3d:b6:9e:ea:0c:2e:2c:6a:14:d2:e6:91:a5:4f:b2:f4:
ea:c2:01:23:7f:9a:87:1f:1b:a0:47:c6:e4:63:33:c6:4d:53:
56:12:d4:7a:3d:6e:ff:26:74:69:1f:a5:5c:8a:20:a3:57:91:
fc:7b:c1:46:4f:4f:a8:be:bb:3c:4c:a4:0d:e1:e0:00:f3:8d:
97:75:0e:e2:8c:58:a4:67:e3:64:6a:8e:dc:90:3d:9e:bb:43:
bf:56:a2:c3:d9:df:20:ca:fa:8c:ab:79:89:80:da:66:0e:e0:
b0:d7:51:8f:c6:77:01:50:13:f3:20:17:ed:0c:61:92:ec:da:
a4:77:43:a2:10:75:7a:06:05:d5:09:3e:47:f0:0c:6f:91:24:
ec:94:48:f1:ae:7a:d4:35:eb:24:6b:23:c4:de:08:ce:df:9d:
a2:e9:b4:3d:2b:c7:26:89:58:9e:cb:ac:8a:3a:86:c3:46:f6:
7e:4f:2f:40:83:86:b9:25:77:d3:86:c9:2a:f5:63:78:6e:64:
39:03:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:51 2025 by rpki-client