Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89bf95a6-5e22-3d74-b604-e50f5b83b879.roa
File: 89bf95a6-5e22-3d74-b604-e50f5b83b879.roa (raw, json)
Hash identifier: lMqagE3H7IcyiwPkcNVXItaGy7f+PiNpY9P4RLBF100=
Subject key identifier: B6:29:89:82:B5:6B:60:AC:7E:6E:5A:2A:40:49:A7:01:91:89:29:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13516D771C6F0F78BB61C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89bf95a6-5e22-3d74-b604-e50f5b83b879.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.6.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:51:6d:77:1c:6f:0f:78:bb:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c18e1fe5-5ed7-461a-8396-ab3a44f83867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:6e:35:f2:56:77:4c:1d:9e:f0:5b:e4:93:
0d:a9:4c:5f:a3:6d:88:a6:b0:1b:b1:09:b0:aa:86:
7d:ef:d8:9c:fd:cb:41:f6:65:99:4f:3e:4f:a6:d9:
70:54:c0:b1:c6:dc:a0:26:89:02:71:37:30:9b:ae:
6b:c3:dd:58:d1:0a:21:81:5f:54:2d:aa:8c:9e:69:
36:d7:a4:a8:5b:0d:26:77:1d:00:fb:cf:ee:2e:b8:
e1:5e:4c:6f:b9:11:bf:19:d0:11:40:ad:68:a6:cb:
15:f0:97:b7:9c:00:db:ff:94:57:f8:75:a1:c1:9c:
d6:e8:d6:3d:58:94:f4:a3:6a:73:75:e3:ad:37:c9:
51:25:90:0f:f6:40:bc:4f:52:51:ff:fe:17:e6:aa:
06:f8:70:33:b8:e5:9d:35:a2:64:11:a6:03:7a:fd:
1d:d1:8a:2c:e5:bc:b6:67:4b:5a:32:3b:83:f2:60:
a1:58:e0:da:08:a1:bf:95:b4:b8:86:0b:ea:0b:30:
c6:e3:2e:e1:67:0c:c3:c9:32:30:90:11:4e:86:f5:
03:25:36:e6:b7:a1:90:16:34:ca:7c:e0:99:16:e0:
0f:b2:e9:1e:f0:3b:f7:ce:ee:4a:cc:3a:05:52:cb:
cb:6f:26:3c:5a:2f:95:57:41:31:b4:04:aa:c1:e1:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:89:82:B5:6B:60:AC:7E:6E:5A:2A:40:49:A7:01:91:89:29:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89bf95a6-5e22-3d74-b604-e50f5b83b879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.6.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:25:e0:b1:84:87:f6:90:1b:32:29:ea:fb:a1:fe:fb:bd:4c:
ea:8a:d3:19:f1:01:4e:01:e7:01:1f:48:aa:01:0d:2a:96:30:
b9:0c:84:86:20:a9:00:74:a6:22:98:5d:da:2a:80:11:99:e5:
af:32:d0:f0:d5:95:31:3d:af:7b:11:5d:8c:7d:c3:93:60:d3:
8d:f2:62:da:9e:88:50:0e:b7:5e:64:e2:17:b9:a4:a0:4b:4a:
17:1d:e6:7a:92:8a:fc:c7:e8:34:88:28:f7:5a:f5:ba:b4:20:
96:43:c2:f9:8e:ab:20:70:29:b3:2b:01:f7:e9:31:d1:77:f8:
48:18:42:76:c2:1a:b1:b8:d2:8e:27:d7:90:b6:45:38:4e:df:
07:1c:aa:02:cb:a7:e4:c8:7c:f7:3a:12:41:bf:db:ee:66:2b:
bd:45:70:ce:4f:04:6d:7c:1c:30:7d:82:28:e0:e4:a8:28:62:
df:a2:8f:1d:04:7d:3e:17:dc:b5:18:56:d0:e0:4e:11:f2:93:
37:c5:ae:ba:eb:93:52:2b:43:94:1a:ee:48:2d:17:35:7c:5e:
db:8e:7f:ff:7d:ee:31:42:11:b6:db:05:c6:52:4b:7a:32:49:
66:9c:0b:b9:06:76:98:03:b9:a3:04:9a:50:fe:76:77:a1:2f:
e1:9e:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:44 2025 by rpki-client