Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9feeebef-8bee-3966-b0d6-fe9f9ed2d1c7.roa
File: 9feeebef-8bee-3966-b0d6-fe9f9ed2d1c7.roa (raw, json)
Hash identifier: MCoISKHLjLBcaISVKXYRlxsJtl8cKmoUs/izawJ4rz4=
Subject key identifier: 5B:A0:FB:1F:8E:9D:FD:7C:29:AA:9C:88:D4:BA:6C:5F:17:8F:22:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CEBA26E20BC92D74288C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9feeebef-8bee-3966-b0d6-fe9f9ed2d1c7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.20.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:eb:a2:6e:20:bc:92:d7:42:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b8a47a93-74bc-4825-8f60-adbf2085e1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:c5:43:55:c4:53:b7:be:4c:45:3b:5d:df:
37:87:f9:28:53:84:05:cf:65:5d:96:e8:81:3d:50:
e8:d5:b7:42:1e:d6:3e:5e:de:2b:32:50:a0:80:4a:
27:0b:4d:0b:2d:91:01:ac:20:f8:cd:0e:e9:66:22:
66:b9:d6:07:f7:9e:ca:5a:28:7e:cd:47:91:23:e4:
f9:8e:56:1c:72:57:68:36:f2:f5:48:3a:14:a8:29:
02:45:c8:c7:90:5f:1b:56:ef:01:48:71:ea:ad:62:
63:f8:85:97:32:65:36:23:c7:b9:b1:b8:8b:ef:7c:
d7:eb:d4:b8:03:4d:52:64:93:e6:ea:a6:f8:d3:13:
d6:c8:e5:c2:c4:e0:e4:b9:5b:f0:37:8b:05:92:17:
27:48:df:e2:0c:ec:75:af:c5:9c:da:7a:ec:70:e7:
32:be:67:ec:7a:dd:94:7b:80:e0:1a:d5:78:c3:c3:
5c:46:bd:c9:45:9e:ef:46:c1:ef:b5:2b:3c:9b:21:
cf:42:cf:56:e9:73:f6:bc:f2:a0:bd:14:43:70:d8:
a0:fb:81:24:e9:4e:ad:6c:31:f6:36:7f:5a:13:b0:
59:5a:42:8e:28:49:bb:39:d9:ee:c6:6e:bb:cd:19:
79:e2:66:93:98:17:ac:bb:dc:be:b5:10:f6:ea:34:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:FB:1F:8E:9D:FD:7C:29:AA:9C:88:D4:BA:6C:5F:17:8F:22:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9feeebef-8bee-3966-b0d6-fe9f9ed2d1c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:8d:22:7d:31:c8:55:a5:90:41:a2:d5:7e:9e:d9:be:51:d1:
02:43:29:0a:c2:0b:9b:65:70:d6:a8:b7:4f:fe:13:eb:2b:29:
d9:55:e7:8c:9f:02:df:85:a6:a5:1d:54:40:0f:f2:b6:ee:48:
8e:bd:e9:90:e4:e9:c0:c7:dc:6f:0b:80:53:21:f5:6c:73:14:
b2:e0:90:52:4f:3b:4d:c5:eb:5a:63:29:c8:29:f7:d4:86:3c:
49:f6:25:8a:0b:85:06:84:83:e6:36:39:cb:41:1d:65:f5:9e:
38:e5:2f:a7:af:bf:df:73:62:61:eb:c4:b1:d7:00:40:38:1e:
2d:95:e4:59:bb:a7:be:1e:e3:b0:f6:47:43:9e:70:da:7e:9f:
c0:f4:dd:cf:2a:3b:05:8b:05:a8:70:95:96:47:d1:88:c5:ee:
83:e2:cd:cd:74:0a:03:8a:43:9f:a8:0d:ef:07:a9:f8:45:29:
ee:1b:76:ee:23:d6:c1:9d:9b:0d:f5:a0:d3:2f:e2:c9:84:e6:
3b:d4:37:90:17:06:3f:7f:ec:74:02:38:2b:9f:de:68:5b:91:
f7:01:81:4a:6a:7f:a2:44:7d:e9:27:f8:88:19:fe:39:7c:d2:
a1:3e:76:03:f4:e4:60:f5:34:51:de:71:89:0d:80:cf:d0:0c:
d5:d1:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:48:19 2025 by rpki-client