Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef8d59e-e985-30b0-a4bd-5ad9863d38e2.roa
File: 8ef8d59e-e985-30b0-a4bd-5ad9863d38e2.roa (raw, json)
Hash identifier: ckrceA9vsYbWQeGtD2L2BDJ1OXN/E989USfj2yHK5yo=
Subject key identifier: DF:9E:96:F8:5A:86:D3:58:4E:3E:70:72:07:57:C8:28:C9:E2:B7:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DA0B57CD406DC1945E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef8d59e-e985-30b0-a4bd-5ad9863d38e2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.63.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:a0:b5:7c:d4:06:dc:19:45:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6ec0c187-8126-4317-ba85-8beafb4137cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:22:04:40:90:7a:78:df:fe:e2:34:23:a5:
b4:2f:c9:7a:05:09:95:5b:1c:2a:bb:d6:33:fa:36:
df:d7:78:47:f8:fe:6e:af:04:20:d5:d9:f1:32:15:
2d:ba:29:3e:4d:b8:b4:cd:38:e6:d5:6c:d3:73:fc:
e0:6c:03:ed:ac:dc:6b:6b:16:b3:e8:52:c4:cf:1f:
a6:54:6f:f5:c5:44:1c:e6:bf:34:3c:5d:41:f8:57:
f3:b1:89:11:32:cb:75:03:85:cc:c2:92:f9:09:1b:
fc:15:14:a9:c1:7f:fd:0d:7e:ce:ac:fa:b1:ce:50:
59:82:98:93:f4:97:3a:6d:89:98:28:c3:f1:95:4c:
da:d5:6b:ba:d3:f0:74:01:9e:7d:d2:0e:f0:59:21:
c3:9d:df:5e:13:b7:45:3f:38:c1:e0:7a:12:68:cf:
eb:62:5e:54:23:39:61:8b:a3:16:ff:0e:b5:da:d8:
4b:94:b1:9f:9f:20:39:67:90:99:72:1c:b9:fa:dd:
3e:a7:6d:b6:75:dc:83:b4:a7:b0:3b:52:a8:43:81:
2f:2e:93:cf:db:8b:fb:76:5a:28:58:34:7c:bd:a7:
4c:46:fa:2c:c9:91:c7:9c:5f:48:23:38:18:a5:6b:
bc:b2:4b:e8:4c:93:f4:7c:1c:75:53:08:22:e1:6d:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:96:F8:5A:86:D3:58:4E:3E:70:72:07:57:C8:28:C9:E2:B7:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef8d59e-e985-30b0-a4bd-5ad9863d38e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.63.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ff:aa:35:80:53:59:2c:34:ae:af:e6:50:48:fd:c4:9a:90:
cd:ea:99:56:be:b0:9f:39:4b:cb:e7:17:9e:62:80:a2:6e:d6:
a8:6e:8d:e7:63:89:bd:ad:19:49:31:bb:39:15:12:3d:54:d5:
d6:4c:98:42:ac:72:31:43:8c:2d:71:64:91:50:be:53:08:d4:
5c:01:32:ca:a0:14:08:d8:7a:2e:29:26:53:6a:c0:7f:f6:fa:
9d:d7:27:2e:25:09:24:d2:64:46:72:89:30:d9:fa:a0:9a:c6:
a3:2e:74:e3:1e:70:76:62:6a:a6:58:2e:7f:b7:5c:5c:19:24:
ca:da:7b:d6:67:aa:65:22:b5:05:49:11:ac:c6:a8:ff:d0:fc:
0e:63:4b:57:98:eb:d2:57:a9:05:20:91:96:c1:00:6f:3d:85:
4c:15:17:da:f8:81:b3:83:01:96:00:73:1d:02:28:0c:27:a4:
ab:ac:9c:0f:af:d4:b7:a7:c5:ac:44:12:bf:61:7c:04:90:93:
60:32:46:a9:e0:5a:aa:ae:d4:4a:ad:42:cc:0d:ae:2f:69:36:
4f:ea:d4:7e:7f:34:de:fc:78:8c:5f:b7:6b:07:94:8c:48:b0:
1b:10:38:07:0e:cb:a2:b8:f0:e7:a7:41:81:63:de:9b:23:ea:
98:e7:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:07 2025 by rpki-client