Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a625d508-4f27-3569-bd48-56bc757ab64d.roa
File: a625d508-4f27-3569-bd48-56bc757ab64d.roa (raw, json)
Hash identifier: DbKSScjxqd2aX/HGX1leq7Ce7t46k7uuJEI2loW2IPs=
Subject key identifier: 7F:30:B7:52:EF:41:4B:22:9A:CB:ED:10:D9:59:24:86:BA:C6:F5:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A86A04DEDF42BF6DA6880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a625d508-4f27-3569-bd48-56bc757ab64d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.20.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:86:a0:4d:ed:f4:2b:f6:da:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=80d68c4a-acc7-42fa-9f55-f68162d96aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:39:1a:61:ba:e6:15:73:1d:46:38:8c:5d:
fa:21:11:65:a4:6a:11:cb:64:28:53:39:2a:94:a4:
9e:ee:d5:9a:45:b3:28:54:e7:43:c4:0a:27:4f:c5:
35:6f:34:34:ea:71:f2:aa:40:f4:ab:12:66:c5:cb:
ff:a8:a7:ad:43:56:39:c1:c9:60:c8:77:84:97:22:
39:3f:74:a0:c3:33:fe:a8:6e:8a:da:23:7d:3d:86:
50:23:10:36:e2:21:1e:52:5e:90:f2:5a:ab:bd:17:
d9:e5:52:23:5a:41:cd:05:d8:06:ff:48:bc:a7:80:
e9:66:a5:f4:7c:e0:9d:86:4c:65:7a:e0:b6:77:40:
66:64:52:30:7a:72:42:31:5b:92:0a:5d:de:2e:32:
41:0c:12:75:c5:96:f8:a4:87:9e:31:65:e4:bf:9a:
16:17:6c:15:f4:c5:aa:8d:12:6b:e3:d9:29:6a:6d:
08:03:4e:b5:b6:7d:40:b9:cb:af:c5:0e:df:39:70:
8f:1a:ad:37:3b:63:bb:a6:bc:d5:ab:9a:b7:26:4b:
05:09:f7:93:93:7c:19:e6:9a:74:81:17:0d:25:75:
45:ac:79:6b:02:63:d9:d2:c3:c5:e5:c3:eb:55:2f:
59:e7:d5:ca:b7:4e:71:ca:e4:33:ba:2f:33:2f:f5:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:B7:52:EF:41:4B:22:9A:CB:ED:10:D9:59:24:86:BA:C6:F5:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a625d508-4f27-3569-bd48-56bc757ab64d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:40:2d:49:32:33:a4:81:b6:bd:64:15:77:c5:91:40:0a:f5:
40:eb:45:1a:6d:b8:7d:34:99:b2:3d:68:52:94:44:cf:27:5c:
cf:c1:67:bf:d8:c3:0c:3b:84:b7:8a:0b:dd:4b:e0:97:cc:9b:
13:5a:a1:5c:6c:70:ed:1c:7a:33:75:ee:35:fd:49:6b:f7:b0:
88:b5:ea:bc:0f:cd:e5:31:ea:49:5b:4d:d7:b1:72:eb:62:9b:
95:19:3c:4b:cf:86:2b:39:3b:c2:32:5a:c3:59:e8:53:31:2b:
58:b9:7c:5d:0d:78:4a:6a:7c:47:aa:55:75:ec:a3:2a:cc:66:
d8:62:44:97:78:06:e1:0b:c7:40:3f:77:6e:ed:a0:28:2e:24:
cb:9c:97:3f:68:2f:36:77:bb:92:18:9d:1e:8a:bf:b6:bc:dc:
18:0e:bc:71:53:6c:90:39:a0:2d:1a:2e:71:42:44:1a:db:06:
50:89:f7:72:d7:90:69:bc:26:23:26:e0:96:d4:52:17:cd:08:
fe:ff:47:04:cb:7a:f5:d2:34:75:84:c9:b1:83:b5:61:5a:da:
34:7f:0e:d5:db:98:06:5b:04:b6:bd:8e:74:8b:ce:b7:20:f6:
74:e4:18:98:d1:6f:7c:ea:39:2a:a2:21:8a:53:00:f5:0c:1d:
01:9f:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:07 2025 by rpki-client