Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4161bf-4ffb-3c10-9758-c8c2de3ef6cf.roa
File: 7e4161bf-4ffb-3c10-9758-c8c2de3ef6cf.roa (raw, json)
Hash identifier: 2rXmsqg1iPrMOYX+RH8s+whNCC3zDo0JlrLOqOEC83M=
Subject key identifier: B1:46:20:3A:D5:FF:3A:96:DF:5B:2F:24:E0:99:BB:52:D7:BC:00:9D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DA4C76B3D5153C02E1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4161bf-4ffb-3c10-9758-c8c2de3ef6cf.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.63.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:a4:c7:6b:3d:51:53:c0:2e:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=008954ba-0172-40d0-be76-85079c59e104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:58:36:ea:34:9a:e0:0b:ef:74:31:12:be:
99:92:23:c9:46:b5:cf:41:68:88:43:f6:8c:b7:07:
8a:cc:2e:31:dc:e3:5b:b3:58:47:1c:8b:98:65:17:
97:9d:a4:ae:e9:9d:4d:4a:28:60:ab:48:77:9e:c5:
f7:71:4a:5d:88:94:91:ff:29:62:21:0f:87:9d:b4:
f5:60:14:11:73:41:75:a5:71:dd:ea:b6:af:e8:6b:
15:7b:77:e1:70:e2:91:2f:68:5c:42:68:bb:02:8f:
7a:44:fe:a1:41:41:f2:dc:3f:62:a0:71:a8:03:62:
61:da:91:da:6e:11:ba:74:d3:0a:bb:b7:5d:95:d5:
04:b1:8b:99:38:99:8d:ce:4a:b4:c8:e7:25:7f:e5:
9a:a6:fd:3e:92:8c:d0:77:de:44:d2:93:e2:93:2b:
b1:39:5a:01:00:fd:cc:50:8b:38:2c:62:10:39:f8:
d9:f7:f6:ff:d3:f3:75:1d:d8:ba:72:63:86:45:38:
aa:16:92:29:d9:d5:76:89:35:cf:0d:d7:48:17:ba:
60:a0:72:3d:ff:37:66:b0:5f:b3:fa:0c:c0:a7:c8:
02:a7:89:8b:87:df:8c:45:c1:e4:72:96:bc:e5:2b:
4d:52:cd:35:6a:d6:28:a0:e2:16:5e:67:0f:00:25:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:20:3A:D5:FF:3A:96:DF:5B:2F:24:E0:99:BB:52:D7:BC:00:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e4161bf-4ffb-3c10-9758-c8c2de3ef6cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.63.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e9:f9:dd:87:ea:5a:cd:e5:09:e0:5c:05:35:f0:7c:26:ad:
3b:b4:67:7f:82:b3:3a:c5:e9:4d:c6:fe:9e:d2:e7:95:c1:76:
9b:8d:79:92:4b:e1:6e:c2:d2:38:e8:a4:1f:ee:e2:7f:c8:0d:
b1:28:22:fa:78:59:b4:0a:48:61:98:88:20:65:eb:56:87:cd:
48:25:ab:de:ed:52:9e:76:50:a6:c3:16:0d:d7:ee:8e:fa:2b:
3d:ea:29:87:ee:ac:82:88:7a:f9:72:d1:cf:a9:83:b1:a1:df:
f6:0b:91:7c:6d:07:6f:c1:76:68:48:1b:4e:35:5c:57:c7:a6:
a3:db:88:4f:89:c8:80:8f:ea:80:7a:e0:f7:40:f4:cc:00:d2:
5f:24:45:3b:46:c6:cb:b7:fb:a4:d6:15:4c:e7:1b:83:07:5f:
4c:8d:45:ac:a2:6e:3d:b1:92:2e:01:3b:1a:88:b1:a2:bb:5e:
a1:12:6d:d9:84:b0:58:a7:da:5d:ea:42:b4:91:84:cb:14:2a:
9d:7b:67:9b:93:92:8e:a6:da:f0:45:ae:d8:2c:8e:3e:0a:a2:
76:d1:16:f4:af:ce:b7:7f:53:6c:33:9c:a5:85:be:d6:d1:16:
27:4a:67:54:46:55:40:c1:b1:2e:d1:b2:48:b2:0f:32:9f:ad:
3e:cd:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:11 2025 by rpki-client