Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b21660d-912b-3855-91dd-fdc00af118e9.roa
File: 8b21660d-912b-3855-91dd-fdc00af118e9.roa (raw, json)
Hash identifier: Q/YrQQEHclhUE8mwIGj7W+exPMaxwb6bId28fKZf3EA=
Subject key identifier: 1C:F9:52:0C:2B:70:83:A8:78:BD:77:DD:EE:FA:B2:3D:19:BD:8B:15
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1176B283E7DEE34DB4EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b21660d-912b-3855-91dd-fdc00af118e9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:76:b2:83:e7:de:e3:4d:b4:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=39b52521-8871-48de-9bca-085c4c9e1b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:ba:4b:93:0b:b6:03:f3:98:bf:cc:2b:85:
64:dc:f3:99:30:dd:f8:f7:6f:18:e1:4f:23:56:a3:
13:89:76:e2:ff:98:d1:27:00:c4:b9:86:c3:36:2d:
c2:83:7b:b6:24:2a:4f:c1:60:24:a3:62:79:18:f3:
24:0d:7b:09:80:60:19:ce:f2:a2:03:b4:e7:39:8e:
7c:bd:7c:2a:16:45:04:3f:ae:85:77:e7:94:62:c1:
28:83:e8:f3:9b:01:29:da:db:9e:c7:a5:eb:1d:d4:
c3:8b:16:87:e3:6f:ce:0d:26:bb:ad:df:32:90:c5:
ba:35:2a:e4:20:04:ef:df:05:e5:1f:c7:ca:3d:44:
84:fd:cb:ad:7f:40:ec:98:41:35:7e:46:83:b5:a2:
74:57:ae:ca:14:53:0b:06:75:68:15:5f:f3:7b:c5:
16:c9:c5:53:fe:aa:a6:12:b0:ae:49:ec:bf:4b:31:
ea:16:20:1e:74:92:9f:d0:ff:05:c8:61:a8:19:7d:
5e:bf:1c:4c:74:c0:0b:e2:01:f1:54:ab:e2:75:ef:
cc:78:b2:ae:0e:60:8c:6f:17:84:b5:7c:5f:76:a6:
ab:27:72:83:b6:cb:15:8b:31:66:84:db:32:51:e1:
25:d0:3c:18:6e:d0:88:23:c7:58:df:9c:68:94:3c:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:52:0C:2B:70:83:A8:78:BD:77:DD:EE:FA:B2:3D:19:BD:8B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b21660d-912b-3855-91dd-fdc00af118e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9d:d2:48:19:09:69:60:af:dd:8f:b4:ad:74:cf:e2:e5:fa:
f1:3e:3b:85:50:c8:85:f7:1d:de:73:b8:6a:2d:55:3d:53:93:
2f:dc:d5:c7:db:14:31:39:5d:40:5b:5e:65:c2:d7:d5:db:71:
dc:4b:7e:06:8f:50:5f:68:f4:de:da:54:e9:a6:b5:22:9e:79:
19:4f:e6:e1:45:d5:2c:5b:8c:0b:2b:29:7c:42:7a:aa:ec:7d:
6e:40:a2:8a:6a:90:ba:38:69:6a:2b:8d:3c:d7:68:00:f1:4b:
ef:e9:22:b3:d2:ef:dc:cf:11:a1:cd:b2:b2:71:00:67:bb:a8:
3a:cc:63:0a:67:79:b7:97:07:9a:e2:16:ff:3e:67:ca:04:d2:
5e:f1:c7:07:86:c6:4c:f8:54:26:85:9e:c1:61:a5:20:32:9e:
c8:88:84:46:e4:6e:6b:2e:6f:28:59:a9:88:e1:41:09:f8:9e:
90:29:8c:37:27:1e:21:ee:91:33:79:52:3b:b9:60:53:d6:cf:
a6:f4:3a:02:bb:dc:07:74:bc:8d:16:98:97:f7:ca:d4:ed:1e:
24:e1:c7:50:2b:d6:74:08:9a:13:1f:95:4b:20:f2:3e:e0:54:
5e:10:67:93:b1:54:b9:eb:10:f0:c6:0d:b2:b1:e2:96:68:8a:
1c:a0:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:32 2025 by rpki-client