Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a14e558e-9505-3c04-b6cb-b849c6b833e4.roa
File: a14e558e-9505-3c04-b6cb-b849c6b833e4.roa (raw, json)
Hash identifier: qBd8Q9yYOyXaiLBVYQz0xdjzOYzLLzUTd9jbtfr6lXY=
Subject key identifier: CD:49:32:6E:1A:6F:FF:0A:DF:9E:FE:DB:FA:C0:37:7D:8A:C8:BF:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126A9A42BCDC8E876303A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a14e558e-9505-3c04-b6cb-b849c6b833e4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.14.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:6a:9a:42:bc:dc:8e:87:63:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4ca406b0-1d27-4a42-b850-2ec445045b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:f7:03:10:35:4e:22:a6:7f:b8:da:fa:da:
40:6a:2d:25:00:a1:89:82:ac:9a:45:06:31:cd:1a:
d9:66:52:44:ef:5b:da:b5:e1:e5:96:65:1b:6f:be:
17:bc:1d:c5:3d:a1:55:fd:65:a2:4d:86:40:51:ea:
c5:cb:0b:6f:44:00:d2:cc:5a:ca:c2:99:d1:76:27:
72:8d:17:b4:ae:0c:6e:c2:40:30:a0:89:7d:15:f8:
0b:18:b5:dc:e9:b7:8d:66:ce:e4:b3:12:cd:dd:1f:
83:66:de:b7:a9:b3:c5:28:23:ef:8f:a2:f5:f8:9f:
f3:5a:90:f6:c1:4e:6c:17:16:f3:f9:44:c4:de:98:
e9:d7:bb:7b:61:bb:9b:14:83:2b:ea:2a:3d:26:f2:
46:32:d4:89:9c:c6:f6:bb:fa:27:23:fe:84:b1:6e:
18:88:23:a3:fd:7a:17:7d:8d:8e:91:94:17:a2:6c:
85:29:62:37:4f:6a:4f:60:48:ad:35:42:a5:7c:52:
ac:9e:10:d2:5e:ea:94:61:b1:f6:7b:74:25:7d:b2:
0f:dc:1a:2e:86:72:48:44:90:bc:32:3a:9a:cb:d1:
1c:42:61:a8:b3:69:0b:d9:23:34:a7:4e:6d:47:14:
2b:93:c2:84:58:74:49:f6:12:10:64:df:39:c2:d3:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:32:6E:1A:6F:FF:0A:DF:9E:FE:DB:FA:C0:37:7D:8A:C8:BF:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a14e558e-9505-3c04-b6cb-b849c6b833e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.14.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2b:2b:a2:13:13:0b:5e:df:a9:a9:0e:ed:ae:8c:ad:ae:7a:
fe:56:7d:5c:4b:06:44:15:13:1e:b5:ab:ac:e0:72:99:6d:66:
dd:03:33:40:83:cb:04:42:9d:19:df:7f:6e:fc:60:f8:14:b3:
28:5f:00:1b:ee:43:09:b8:a5:9b:1a:d3:62:23:17:ef:1e:d4:
dc:23:ee:21:61:27:da:11:d1:57:9c:58:81:2b:c9:7a:54:5a:
4c:d7:a2:68:31:9e:b4:b1:5f:fc:f2:13:17:75:b0:3a:5a:70:
9f:83:37:f7:57:61:c6:2a:5b:89:d7:49:b4:d4:80:47:65:17:
a6:47:00:e9:35:3e:af:62:70:1b:fd:2a:75:7f:94:40:e6:71:
21:12:69:f8:30:49:63:01:8e:3c:d1:07:98:f6:71:ba:f0:6d:
f0:c4:91:05:7a:f5:47:df:07:8e:57:2d:15:9d:bf:36:91:09:
16:cd:f7:f8:7f:f2:79:2c:5b:ef:17:8a:e3:11:d8:fb:b7:fe:
41:aa:74:d1:5d:94:fe:7c:4c:52:28:38:bd:7d:58:5b:ca:2a:
0b:10:e6:a1:0f:7b:00:ff:a1:fa:fe:63:8c:1f:3a:e2:8b:b9:
78:17:14:20:5f:18:d9:d0:47:a8:04:0b:8b:35:90:0b:56:21:
23:5b:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:15 2025 by rpki-client