Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bbd3742-208d-325b-9130-a68d8c72a8a0.roa
File: 9bbd3742-208d-325b-9130-a68d8c72a8a0.roa (raw, json)
Hash identifier: ZnrDLldS9qAIzSAvvGhoBJiqH/nMiEaX6QRpBBNuWlU=
Subject key identifier: 19:C3:4C:FD:15:0E:86:F2:6F:ED:39:D9:A2:3C:CC:3F:F1:0A:5A:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13476FD8CC96F3F6A23D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bbd3742-208d-325b-9130-a68d8c72a8a0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:47:6f:d8:cc:96:f3:f6:a2:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ce2547af-07ba-4002-b3af-92daa38d7e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:dc:64:64:95:93:e8:26:b1:a0:9c:6d:f4:
bb:f5:95:8f:4b:d9:cf:5c:bf:20:73:5d:bd:70:3f:
8f:8d:12:16:80:2d:18:9b:ac:5d:f8:94:b9:fb:e2:
39:22:6d:dc:d0:4c:2b:cb:7c:93:a0:8e:44:ef:fb:
36:20:0b:6e:ce:0f:0e:4d:93:73:42:53:90:90:df:
2e:21:b8:32:e6:b7:f5:af:b8:77:59:dd:fa:a2:45:
4b:d7:cc:dd:48:1d:a8:b3:cc:44:6a:95:33:2d:0f:
3c:ae:13:01:b6:2b:11:3a:b6:0a:09:06:db:8c:d7:
ea:18:b7:d9:dd:a5:af:e5:2a:02:15:ee:29:ad:0f:
fd:3b:06:6e:b0:04:55:a5:13:4e:78:f7:85:9d:50:
99:29:2c:70:8e:0b:1e:e6:9e:12:b5:1b:cb:68:dc:
f0:6a:e2:10:fe:47:7a:8f:51:6d:77:2b:37:18:30:
42:05:5b:7d:f9:5b:15:ac:a3:7f:77:23:93:1d:96:
17:11:5a:8e:db:92:36:23:d2:64:3f:e1:dd:f3:a3:
e9:00:ce:0b:72:1d:b1:d8:16:ed:42:55:e8:da:57:
be:21:77:b3:64:0b:43:52:d1:13:74:8d:3a:c7:f0:
cc:84:b0:98:7c:34:67:51:69:ea:ee:28:d6:26:c2:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C3:4C:FD:15:0E:86:F2:6F:ED:39:D9:A2:3C:CC:3F:F1:0A:5A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bbd3742-208d-325b-9130-a68d8c72a8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:44:f8:89:9c:45:4d:88:5e:8e:1e:14:2c:1e:66:0f:8b:70:
3a:fa:f5:f4:10:81:55:20:8b:0d:f1:1b:e5:b5:f1:bf:09:d8:
7f:99:de:56:78:38:16:8c:64:6e:da:4b:d9:c1:10:46:31:bb:
4e:0c:00:75:c5:ee:9d:6a:a0:6b:04:50:8b:72:b4:04:a1:41:
22:a0:9b:b1:dd:57:43:8f:fe:00:94:09:2c:69:f9:25:8d:a9:
74:38:50:5e:ac:bc:08:8b:23:2f:ff:73:e6:a2:d3:45:d9:2d:
30:18:e6:2a:a7:69:9b:1a:07:1b:f4:8d:42:ae:89:67:c5:58:
aa:09:ff:db:0f:fd:83:3e:8a:ce:52:77:31:8f:dd:0b:2d:52:
2a:65:58:a4:1f:0d:90:2b:f0:6b:63:a0:d6:c0:0a:18:5f:26:
cd:54:29:cd:87:3c:1d:a6:d7:39:9c:6f:8b:a4:5b:af:30:78:
9b:25:7d:61:88:42:f9:b1:82:8f:19:fd:24:07:1e:53:13:b4:
eb:38:f0:7e:89:22:c9:4d:b0:02:03:d3:c0:ed:a9:f6:0b:e2:
ff:2c:3e:ed:bb:42:8a:d7:f1:72:79:20:1d:03:91:85:af:df:
f6:ad:39:53:54:f3:fd:c6:69:f0:b5:65:93:3a:46:8b:a4:46:
0d:7c:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:51:55 2025 by rpki-client