Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
File: 6dca5a17-8e7b-3be9-b53b-2a516a105494.roa (raw, json)
Hash identifier: ROdCSgSyf+QeTGCzM1a3HYFN7LHhwZTALFDLRQepTaw=
Subject key identifier: 44:2D:0D:B7:64:09:DA:F8:41:81:9D:05:4F:08:74:DC:B8:4B:79:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ACFA029CAF3E231D39C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.91.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:cf:a0:29:ca:f3:e2:31:d3:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b5507508-c287-4e3b-836e-e7fbcae8e92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:1a:ad:cf:74:db:69:f4:38:1d:bd:49:1c:
11:98:b9:05:b2:ce:ec:45:44:ef:bd:7d:cd:fa:c2:
58:9e:84:a5:cb:ae:96:9b:2b:40:5b:34:b6:3e:a3:
63:27:15:fe:36:01:e6:18:ad:1e:4d:ac:13:15:e1:
66:5e:b3:58:e8:7e:a5:8f:74:0d:7e:29:ae:1f:fd:
c3:9c:94:53:23:04:40:16:97:43:84:10:3a:26:2e:
fb:94:b0:83:df:79:98:78:e6:e9:14:ff:66:ea:91:
b0:3a:73:72:c7:b2:ab:5e:39:91:52:8a:d0:89:75:
3b:02:50:9b:37:20:b7:d3:4c:f7:c7:09:8f:18:08:
48:b2:1a:1d:a2:b4:13:d4:60:9f:b4:eb:33:ee:a9:
c0:c7:17:c7:44:37:c6:e1:72:77:b1:f0:86:6e:2e:
9f:47:ad:f9:6c:5f:eb:b2:e7:fd:9c:1e:8a:50:bc:
44:dc:d0:a9:12:f8:fd:72:e7:c2:29:84:e5:60:69:
bd:91:4b:01:d1:4c:81:97:97:a0:b8:43:60:a0:46:
dd:37:c3:23:2a:57:a8:48:00:0d:7a:3d:1d:0d:55:
6d:1f:39:7d:75:c5:d3:65:fe:22:ed:0a:d3:6b:4d:
b1:ab:10:2f:d3:63:97:28:bd:d0:35:94:8d:e4:66:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2D:0D:B7:64:09:DA:F8:41:81:9D:05:4F:08:74:DC:B8:4B:79:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:e2:d1:a8:84:c0:16:51:24:6a:5f:90:6b:ce:ff:dd:18:8c:
0a:e6:75:06:27:59:7d:66:24:76:9e:78:a0:17:51:8a:11:37:
b5:fc:4a:ff:95:41:13:fe:a1:52:2c:2e:ce:46:db:f2:7e:fa:
b3:2d:2c:4f:d3:cf:56:1d:7c:0c:ad:00:3b:30:7b:d4:a9:1f:
c6:85:92:38:01:e7:05:b9:c1:08:ea:6f:63:d5:b4:d7:6c:ea:
17:bb:b1:2f:de:80:ee:3e:ac:35:dd:9a:56:cf:89:f1:92:3d:
b5:43:df:3d:6e:2e:2b:df:d5:4e:a6:f1:61:3d:0a:70:0c:73:
e2:59:4e:55:d3:6d:7b:e0:f6:68:e5:12:37:d6:48:29:1a:fc:
02:0d:4c:ed:a1:1f:99:c0:89:a7:b8:0e:55:e5:86:39:48:28:
43:22:ab:ed:bc:ad:a6:08:e6:44:f9:19:46:ca:a2:bf:4f:af:
e7:10:f1:61:50:63:59:7c:6c:06:97:ab:dd:00:13:ef:a0:34:
bd:52:9f:db:ae:f0:36:c3:eb:4b:95:f6:7b:68:14:fb:18:7d:
ba:9b:43:f0:79:ce:28:95:47:59:4d:32:8b:88:0b:38:15:f1:
8d:b0:1d:fa:8d:f9:72:b1:31:53:b9:f4:e8:a2:af:fe:91:30:
41:ff:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:45 2025 by rpki-client