Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7385928d-b1d5-3bd1-995e-e0bffa224fae.roa
File: 7385928d-b1d5-3bd1-995e-e0bffa224fae.roa (raw, json)
Hash identifier: YJrfJosIiqcyZAfjOa9E/9XEcJdLSSccrHIYlPoS/fc=
Subject key identifier: 83:41:8A:F6:11:B0:81:62:44:78:A5:73:36:B8:D9:C0:1B:86:68:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AC7BEFE69A1D9CF47F5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7385928d-b1d5-3bd1-995e-e0bffa224fae.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.34.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:c7:be:fe:69:a1:d9:cf:47:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=41ad26b4-f9e8-4e8c-891c-5d597bc78f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:d2:eb:ce:10:52:1d:b2:b3:41:9a:0f:97:
eb:80:cb:f8:75:56:8f:29:d9:37:7f:09:79:66:22:
13:4c:62:f5:ce:9a:fa:00:1b:dd:64:4f:21:a8:0f:
ce:6f:4a:78:e9:46:3e:9f:b8:2f:67:d5:04:39:4f:
77:bc:c9:3e:24:8e:01:18:ea:84:23:e9:c3:75:91:
b3:71:83:ce:de:bd:b6:45:61:70:e0:aa:35:77:79:
4e:ca:b7:7a:42:87:3c:f6:ca:77:39:1f:02:80:6a:
dd:b8:1a:85:4a:14:7d:57:86:bd:f1:ef:a5:94:b7:
73:ee:bd:6d:f6:fd:e1:b8:bf:4a:68:98:d7:98:26:
55:79:de:70:f6:17:95:0a:ed:5a:59:f1:51:3b:75:
73:9c:6f:e9:ea:95:b4:a5:56:36:2c:9d:ad:f4:23:
79:8e:6b:aa:ff:f3:fd:60:28:ce:ab:fd:d3:6f:e0:
83:95:2f:b1:9d:22:87:6b:88:0d:66:c0:29:0d:da:
86:88:3b:8b:32:f8:b2:e3:b4:b9:80:63:c8:b3:c0:
d1:54:f3:e5:b4:ee:e7:b7:3c:1f:7d:8f:22:86:81:
9b:f6:55:70:08:10:53:52:f9:f1:89:fa:08:58:3f:
88:0a:71:1a:06:bd:22:fa:c4:fa:29:0c:5e:5d:57:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:41:8A:F6:11:B0:81:62:44:78:A5:73:36:B8:D9:C0:1B:86:68:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7385928d-b1d5-3bd1-995e-e0bffa224fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.34.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:76:0c:4d:dd:e5:6c:f5:8d:56:61:62:c7:cc:b1:f4:b5:58:
dc:28:b4:b1:dd:c4:4a:c6:5c:20:a6:fd:a2:2a:c6:04:6d:a2:
e7:62:78:3d:56:07:83:fa:25:b1:0c:ee:a3:c4:73:a0:4b:56:
e8:c2:93:c3:d5:9b:ae:63:c1:e2:d1:22:10:8e:64:d1:f6:61:
00:ee:97:51:16:13:ac:8f:93:2b:79:ea:96:9d:04:23:73:e0:
77:87:ac:29:05:0b:4b:c9:75:30:de:a3:32:a1:5c:15:90:98:
c4:c1:47:a1:8d:22:8f:e1:8e:92:23:ba:54:eb:44:f1:da:6e:
23:d7:e4:01:72:63:c0:e8:e7:d1:45:08:a6:ab:ac:5d:f0:ce:
d8:04:f2:ea:52:bd:3a:42:6d:33:df:21:16:7f:1b:08:31:f8:
72:e2:70:da:5b:c2:f3:f6:0d:41:77:d9:77:0f:53:1a:b2:99:
93:82:d4:c0:72:7a:b8:14:fd:f0:46:d6:d5:2e:5c:e8:d7:da:
b0:8d:25:3d:64:d7:d4:75:54:06:f6:1b:c3:de:1d:b0:a0:21:
db:03:ad:e6:ea:66:05:ba:6e:60:09:4c:f1:57:dc:e3:98:e4:
3b:38:fc:2c:ec:dc:38:8c:68:4d:cc:eb:e9:d1:0b:bc:41:af:
79:9c:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:22 2025 by rpki-client