Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ec7ba4a-f767-324f-b8d0-c9bed08ddc73.roa
File: 8ec7ba4a-f767-324f-b8d0-c9bed08ddc73.roa (raw, json)
Hash identifier: o0q9uL0MBe2OJrzP6BhhOTbslfyINbL+WQIKtfaoSAI=
Subject key identifier: 7C:A0:75:B7:0B:17:66:36:21:FC:5F:9B:91:B3:ED:1F:9A:06:42:8A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10397292F031102518C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ec7ba4a-f767-324f-b8d0-c9bed08ddc73.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.2.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:39:72:92:f0:31:10:25:18:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ec5db0bc-af96-480a-9909-67de1506287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:93:96:a7:ef:b8:59:e5:43:1e:ab:11:1f:
71:31:86:60:80:2a:ff:c0:8b:4c:eb:b2:b7:6a:fa:
4c:c0:0c:7a:c2:cd:fe:f8:55:8d:c5:a1:ed:c0:9e:
c4:77:01:3e:3c:ca:87:7e:de:00:ac:fb:24:8a:99:
ff:88:3e:57:d8:6a:82:6b:4f:f2:e2:e1:bb:fa:36:
88:47:5e:98:8f:d4:20:cb:59:c3:bf:80:2a:9f:5e:
13:26:cb:6e:cf:4f:86:e8:5b:5f:b6:68:24:3d:0e:
e0:d6:af:55:69:10:e3:be:d7:67:b0:d9:21:b3:98:
02:de:01:b8:f2:33:9e:32:fc:c1:01:b9:dd:31:31:
27:9b:b6:d1:95:82:b5:2f:63:6b:0f:d5:2a:99:83:
2c:02:d9:af:31:3d:91:bf:03:ab:27:26:64:7e:60:
93:a5:c1:ea:08:dc:d8:91:20:a1:87:1f:8f:43:08:
bb:1a:58:7a:40:46:8b:ab:f4:6a:0b:62:48:46:09:
66:9b:d7:ee:86:69:77:cd:5e:da:89:17:06:b3:ea:
f4:09:ef:bc:eb:f2:32:27:a1:cd:67:ab:21:10:1d:
db:0a:e0:e5:9c:3a:48:14:70:5e:7d:0c:4f:53:40:
5c:5c:c8:6b:43:bb:8e:98:e1:dd:9e:56:09:43:99:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:75:B7:0B:17:66:36:21:FC:5F:9B:91:B3:ED:1F:9A:06:42:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ec7ba4a-f767-324f-b8d0-c9bed08ddc73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c1:ab:e6:e2:02:40:57:cb:41:6a:b6:72:2a:56:39:2c:af:
41:fb:18:ed:d3:46:db:20:49:f5:07:a5:b7:52:ca:6e:de:c2:
0d:f5:b4:4a:d6:31:3f:6b:00:9b:f4:52:13:08:05:38:63:a0:
8e:a5:b5:11:80:6c:39:db:1f:80:06:ec:bf:b5:5f:19:3b:66:
3c:5f:d0:4b:bb:0a:be:a7:fa:41:9b:5a:e6:26:ce:bc:7b:a5:
b5:03:cc:1e:8e:a7:71:9f:d5:61:cb:61:11:a4:d3:b0:ee:ef:
a3:70:72:b9:84:26:fd:44:61:6b:ba:be:de:cd:10:97:7a:1e:
74:18:ba:bd:38:af:1a:3e:d5:39:50:91:95:e4:cd:e8:e9:e3:
7a:a3:ed:2b:df:8a:3a:fb:d6:a4:64:ef:84:2e:72:33:15:99:
a0:e0:c4:2b:6c:83:71:55:4c:2a:9f:cf:0d:2c:60:4e:72:21:
71:ff:fc:3a:ea:9a:d2:e3:52:90:e4:eb:0d:b3:31:86:8b:7b:
5b:6c:7f:f5:20:83:cc:04:41:35:83:d1:3b:42:8f:39:bc:f0:
03:fd:be:ad:e1:b0:8c:cd:38:de:57:ee:d0:69:39:ef:06:d6:
a7:66:46:ce:c7:98:72:e1:9e:55:40:36:79:68:5a:1b:69:22:
bd:16:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:06 2025 by rpki-client