Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec7eb05-1a60-35b7-be34-9a6263c0994f.roa
File: 6ec7eb05-1a60-35b7-be34-9a6263c0994f.roa (raw, json)
Hash identifier: qpRgT6+hWiHMzB28WCnWWs1v/79q/bEK3zv6VfuRwB8=
Subject key identifier: 87:E9:A3:BB:01:55:F7:3C:89:6E:EC:36:C8:39:FF:08:B7:F3:9E:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ACFDF0D19642CDD856C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec7eb05-1a60-35b7-be34-9a6263c0994f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.91.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:cf:df:0d:19:64:2c:dd:85:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ea5b4be4-924d-4544-84ae-5428a1d38244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:e0:b9:fd:f3:cc:d7:00:f9:91:90:b0:f2:
74:40:10:61:78:27:c7:4f:8f:98:50:eb:04:ad:cd:
82:df:d5:5e:c1:0d:26:13:0f:a5:11:f0:9a:aa:02:
95:be:a2:75:f9:ca:17:d1:c9:25:4d:10:1c:d6:93:
81:c4:e1:85:55:73:e2:7c:52:94:5e:7f:a8:0b:03:
a0:f7:df:f6:f3:80:09:a7:86:e9:93:16:ab:34:fb:
19:41:6f:87:57:4b:e3:78:35:5e:1d:ed:c8:cd:fc:
98:d7:55:69:25:1e:e9:6b:27:4e:05:6c:3d:7e:d9:
94:bc:92:46:ff:51:ef:37:16:83:b3:48:b2:05:7e:
ad:6c:7f:77:7e:93:99:e9:7d:c8:41:f1:35:cc:f9:
a8:ba:aa:e7:a6:d8:3a:7e:7e:5c:a9:96:59:ee:e4:
9e:94:8d:e8:6e:96:90:ca:58:84:1c:a4:ea:bf:b8:
64:f4:ab:7d:80:4e:89:2c:26:ef:8e:48:b3:ee:f8:
d0:2e:c2:07:66:d5:45:32:4e:84:14:4c:6d:25:30:
b1:b0:1f:7f:21:9d:a2:0c:1b:c2:fb:e6:64:0c:ad:
17:c0:43:46:53:93:41:39:1c:5e:c1:ed:e7:12:0a:
3c:21:79:71:66:19:eb:74:a4:f5:75:bb:36:69:b7:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:A3:BB:01:55:F7:3C:89:6E:EC:36:C8:39:FF:08:B7:F3:9E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec7eb05-1a60-35b7-be34-9a6263c0994f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:be:2b:ec:c7:76:48:05:c2:66:94:7a:fc:0d:f0:be:83:f0:
5a:e4:7f:b7:2e:2a:14:22:9e:15:c8:5e:26:b9:f7:57:40:1b:
7f:f8:07:30:ba:4c:8a:08:3c:fd:30:f2:02:06:b1:e3:2d:10:
ac:11:de:6b:ed:f9:ad:07:94:99:9e:42:09:c4:e9:c1:65:98:
85:6a:30:7d:09:1d:5c:e0:61:05:4c:fd:9c:4a:dc:18:0d:8f:
40:5c:ff:ed:63:67:b1:53:c1:26:84:ea:b3:c6:e0:70:8d:59:
c2:99:1b:0c:27:dd:bb:5d:df:ad:cf:73:05:ea:d8:11:50:3e:
c6:3c:df:a9:f9:70:58:51:23:0a:08:c0:83:6f:9b:f7:c9:30:
97:9b:dc:1c:38:f4:64:07:c9:4e:94:3a:12:14:65:9a:59:fe:
d6:12:69:2f:d6:47:af:69:27:33:f5:93:23:5a:1d:dd:2a:1c:
73:dd:39:5a:58:bc:4a:45:c1:98:1f:a5:14:48:0c:64:06:3d:
c0:6a:fb:f4:13:fc:14:88:e3:77:78:d8:f2:16:9b:62:de:d3:
49:42:f8:cd:ca:22:ed:3e:3a:9b:12:f1:d7:d8:5d:da:a1:97:
8d:f9:36:2a:e0:9e:43:a5:b5:75:a7:7a:4f:4a:77:82:29:be:
cb:c8:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:42 2025 by rpki-client