Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/993bb92c-223b-3e91-ab5d-39ce60ed59f7.roa
File: 993bb92c-223b-3e91-ab5d-39ce60ed59f7.roa (raw, json)
Hash identifier: clzGl2WJot16M9d/IKZqT5LqGNbOZVbI2yDUTeZAb5w=
Subject key identifier: 5F:2F:E8:34:93:9B:74:D0:25:6B:5F:E3:47:CB:4D:BB:5F:BB:7D:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C105A5704E8E0CD913C7700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/993bb92c-223b-3e91-ab5d-39ce60ed59f7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 24.0.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:5a:57:04:e8:e0:cd:91:3c:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e1a82262-adb4-4194-9347-9f853af3526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:5e:9d:82:74:83:cc:10:ed:91:9f:fb:3a:
db:52:a1:e4:36:cd:a9:ad:a9:e5:7b:07:68:1a:e6:
48:8a:7c:87:17:b9:de:e5:c6:b9:bc:13:7e:7e:1c:
d4:bd:db:77:94:9c:e1:12:c8:d9:06:9d:4e:58:fc:
9f:76:09:3f:cb:e0:50:ab:7a:25:30:5f:0e:d8:ef:
56:44:aa:ab:e8:f0:ac:62:c5:14:1d:ad:2d:7e:8c:
8b:d4:dd:c6:c0:57:8b:8a:c3:e5:3c:69:13:d5:e3:
aa:02:01:04:a0:33:8a:db:fe:c2:d2:34:d5:a7:17:
c2:42:e8:ba:05:b7:17:21:0b:41:1c:b5:87:3b:d7:
f1:6e:50:29:c3:6d:25:9a:19:89:9f:cd:79:46:4d:
93:47:e4:e2:20:34:86:a7:ff:98:ee:4f:52:a1:ae:
9b:bb:65:65:a6:c8:e9:ab:41:fc:56:53:be:c1:c0:
14:ca:10:1b:d7:1a:0a:3f:1b:f0:4e:24:41:32:a9:
e9:af:e7:bb:1e:41:ff:cf:df:c0:45:38:2c:73:fe:
04:b4:56:ac:67:fd:2b:1e:e1:7d:92:e0:9d:63:53:
2f:62:92:f6:35:77:5d:d4:0d:d3:56:83:1d:20:8c:
34:46:89:22:7c:08:57:cd:2d:64:43:6c:5d:b8:ab:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:E8:34:93:9B:74:D0:25:6B:5F:E3:47:CB:4D:BB:5F:BB:7D:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/993bb92c-223b-3e91-ab5d-39ce60ed59f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.0.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:bf:18:55:25:1b:89:67:19:b3:04:83:cb:44:e0:c4:3a:24:
fe:b3:53:6e:d8:0d:39:ba:1a:3b:07:9c:c1:93:ac:ca:f4:01:
1d:42:84:33:b3:7b:e8:f4:37:3d:78:c3:e6:01:1b:a8:29:61:
3b:15:0d:67:d6:4a:44:bf:86:9d:3c:88:f1:53:ae:b6:de:06:
78:1b:03:a4:ef:9d:e8:8e:c5:c0:fa:33:2a:74:f1:2c:09:1d:
38:9f:17:a3:65:0d:9e:12:75:98:9c:9f:fd:6e:75:9e:65:ea:
9f:eb:79:a5:c8:77:8b:93:8b:bd:bf:32:c6:c3:6f:15:1e:23:
36:84:c9:b1:5d:8a:cb:87:70:a4:9f:7f:e9:4a:87:74:2c:61:
ab:4f:41:0a:75:a4:34:a9:1c:f4:1b:00:3f:21:ee:0d:a0:a0:
a0:b4:a6:ee:de:58:b4:55:08:aa:fd:ae:40:6a:77:ac:b4:a2:
05:75:fd:f8:ae:59:d9:a5:b4:36:cc:3f:29:9b:d4:e4:97:d4:
5b:ac:9f:af:16:e6:12:fb:40:6f:f8:38:ec:7d:8c:0e:9f:46:
7a:97:39:94:9a:b6:89:76:7a:74:3e:c1:a5:b6:c9:a0:13:c5:
45:9c:c3:cf:28:c4:08:28:ab:5f:0c:2d:6b:d4:0a:3d:5f:63:
29:b4:71:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:59 2025 by rpki-client