Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa
File: 8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa (raw, json)
Hash identifier: duI/7xve6njK/Ihw6Jx+CAWGr/AmIh4V3Env3faUiNA=
Subject key identifier: 2A:EC:86:CC:8F:1C:42:D5:D1:71:47:47:42:01:E4:E3:DA:7E:AE:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10C77B71CB496967091070
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.13.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:c7:7b:71:cb:49:69:67:09:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e3b14d35-2844-452f-b4fb-489f90226fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:3c:e0:45:1f:bb:86:00:85:9c:21:74:10:
9e:8a:32:dd:50:06:e7:32:70:88:88:12:28:80:cc:
ee:25:5b:1d:86:4a:30:73:1f:61:19:c5:44:0e:77:
f7:9c:01:45:27:d6:bb:e6:24:70:c3:95:15:ba:fe:
71:ce:de:5c:11:26:6f:ee:1e:4e:40:cf:5e:ed:72:
31:29:20:10:ec:01:bf:27:fc:5b:ba:9b:3e:bc:dd:
49:b7:ed:6b:8d:0d:ef:f8:21:ea:e9:c7:0f:b9:80:
73:f9:cd:55:b4:da:38:59:90:60:05:d1:ba:f4:62:
96:4a:44:20:4f:ce:a8:04:29:f8:c1:3f:6b:d0:10:
95:1e:90:5f:59:ac:ef:da:10:cc:cd:27:9f:83:f3:
34:bc:83:cd:67:d7:27:d6:ba:a2:ba:bb:34:2c:02:
20:01:9b:43:f2:19:ac:f0:06:7c:8f:9d:20:1a:f9:
f7:67:fa:d7:90:c9:be:1f:9d:79:1a:3a:d2:53:9d:
8e:33:c5:54:af:fc:98:15:f1:4e:61:21:f4:ad:97:
bd:2f:83:7c:15:9c:f6:d3:02:b7:cc:0c:49:91:5e:
2f:25:2f:b8:09:19:7b:c5:ef:91:49:bc:fe:c5:c4:
67:f3:49:ab:c0:de:45:86:9c:18:e8:ed:54:79:7e:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:86:CC:8F:1C:42:D5:D1:71:47:47:42:01:E4:E3:DA:7E:AE:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.13.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d8:2f:32:24:86:7e:ed:bc:91:c3:98:a8:f5:45:e7:ac:f2:
81:43:36:b5:5a:85:67:e9:9d:1a:4b:97:33:73:e3:62:d9:81:
1d:f4:43:58:4e:de:14:ea:0f:e1:65:af:b2:4d:93:06:2a:65:
1f:87:d3:f3:10:b3:35:c9:19:75:81:fd:06:2f:be:6a:1c:ca:
9b:87:65:ad:99:f0:bf:c9:c8:ce:69:a3:11:25:61:8e:aa:6f:
ee:ea:6f:98:be:d8:77:3d:f6:63:e0:48:a8:98:45:ff:d3:c7:
90:70:7b:64:a3:54:b2:dc:91:57:02:e9:47:75:a4:78:89:d9:
0c:ac:a3:e5:ff:88:a2:a5:17:bf:18:7e:d1:bc:56:6a:fd:38:
11:3a:ee:7a:13:4e:72:c3:f5:32:1b:06:08:b2:b5:ca:cc:a9:
1e:bc:b5:ac:54:47:cc:65:eb:27:46:dc:7d:8d:6e:8d:25:f8:
d0:bc:35:c9:89:05:8f:d9:46:66:7b:2c:38:7b:7c:29:95:55:
3e:6b:5b:90:87:c4:b9:6a:b0:f0:dd:45:64:61:ff:b4:6a:74:
18:18:14:e6:1d:a0:c4:df:d0:de:15:49:56:80:3a:1c:5a:ab:
ef:47:c6:a7:eb:ba:c3:59:5a:59:f2:2e:4d:1b:98:3a:2d:cb:
ba:59:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:15 2025 by rpki-client