Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa
File: 8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa (raw, json)
Hash identifier: N+IglbqS3Lh3HpzjXUkzVYCTiPB5T43XPest5Z0S9Ug=
Subject key identifier: F3:31:52:44:6D:D0:74:37:A8:18:9A:85:E6:0F:08:D8:EC:BD:87:17
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B40560BDC6C54139CBC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 24.127.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:40:56:0b:dc:6c:54:13:9c:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5a4af7fd-d720-4532-8659-794e08e25003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:08:a7:ab:ef:6a:22:bd:bd:6d:cf:ab:7c:
87:5f:17:5f:e0:8f:e2:d2:36:59:86:7a:93:01:41:
53:17:f9:08:4e:d4:9c:73:c4:6f:a7:33:0c:42:f5:
cd:2b:b8:f4:02:37:45:d1:dc:cb:74:6f:34:82:32:
70:2f:ad:3f:20:68:13:5c:0d:c5:58:19:e4:38:52:
58:dd:80:c7:8f:ac:24:cd:38:a8:6f:a1:1a:cc:aa:
c7:a1:77:8c:d2:5e:ae:12:b0:01:9e:0a:a1:e3:88:
fd:a9:89:02:0f:95:c3:77:45:52:0d:e0:96:e9:87:
4d:c4:cb:dc:ca:5c:3f:6f:46:df:f6:f3:1a:a0:70:
a1:61:8d:d4:2a:26:22:bb:6a:bb:90:75:15:6b:25:
0c:cd:5e:6e:70:4b:f2:33:08:ce:37:37:b8:a7:40:
af:29:54:14:f8:26:2b:e8:b6:02:fb:49:3d:36:a3:
eb:e6:0d:c6:fe:c0:bb:10:e2:b8:bc:ea:27:87:2d:
52:9e:51:48:95:b9:73:22:e0:6d:be:fc:ac:5f:46:
36:e2:8d:55:e0:05:4e:e4:c0:2a:65:75:54:7f:07:
d7:4f:45:90:ff:7f:82:25:c5:d1:d0:84:83:85:0d:
92:1a:fb:78:ae:47:20:dc:46:3f:23:69:8e:a8:46:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:31:52:44:6D:D0:74:37:A8:18:9A:85:E6:0F:08:D8:EC:BD:87:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8abb768a-6333-3c34-86d4-6ecea3a9a7e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.127.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c5:bb:8c:4a:31:0a:9f:a5:0b:31:1a:24:4c:3b:1a:89:b8:
96:0f:4f:60:32:d4:56:e8:6c:32:53:18:c9:09:70:22:cf:9d:
8f:55:bc:2b:13:b3:f6:50:27:8f:6d:78:2e:25:57:12:4d:ba:
09:d0:ec:cd:1b:33:76:c3:e8:57:45:ed:bb:13:68:0c:28:76:
71:e9:2c:f6:6b:ff:bc:25:5d:c6:e5:d4:a0:a9:e4:79:27:7a:
db:ee:26:57:ef:78:55:7b:fb:9b:77:1e:92:e7:f0:78:ba:3f:
be:4a:3a:be:e3:fa:56:2e:9c:c0:aa:02:88:17:20:4d:42:3e:
35:de:31:26:11:f5:d9:ba:14:f9:b2:fa:16:22:c2:db:27:19:
5a:b6:0a:28:2c:ce:76:13:74:56:1c:65:95:e4:d8:67:cf:b5:
41:c5:38:98:a4:f9:c1:f9:f9:55:1c:2e:8c:04:ca:5a:bd:b3:
5f:77:91:7a:ef:1c:15:aa:02:6e:4d:25:69:56:ea:5d:e3:79:
cf:36:86:82:79:8a:57:a4:c6:f8:53:1f:54:e1:a0:a9:e5:c2:
40:3b:3e:07:2b:97:f2:7a:60:6f:cf:51:7d:45:75:df:2e:a2:
92:f4:d3:b6:eb:8f:4b:9f:72:29:21:80:68:b9:dc:63:0d:91:
b2:7c:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:51 2025 by rpki-client