Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c0c4a6-a727-31c7-b6bc-4392a0215232.roa
File: a8c0c4a6-a727-31c7-b6bc-4392a0215232.roa (raw, json)
Hash identifier: +lFgSzxP+6ZwJkFN9+1sI2hvDZW1MyFn4sSz+4TEFL8=
Subject key identifier: 24:42:CA:C5:1D:8A:62:3E:07:8A:E2:14:E5:22:DC:78:FF:DD:0D:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126CBC32816E74A73A1E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c0c4a6-a727-31c7-b6bc-4392a0215232.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:6c:bc:32:81:6e:74:a7:3a:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e9e05e66-5020-4284-99dc-f5fe300409b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:9e:23:d6:ba:c9:55:cd:07:d9:aa:9f:5c:
20:64:a0:d0:9e:24:c0:b9:ec:c7:60:36:0c:60:9c:
97:1a:47:d7:5e:61:14:95:fa:4d:65:77:02:9c:09:
b1:c9:61:e0:70:54:c7:df:4e:7c:70:b9:43:ea:5c:
00:9f:e6:84:9b:0e:e1:b5:08:d5:20:d2:41:90:74:
ec:bd:ed:be:0b:fc:e7:88:b7:f8:b6:78:59:a7:eb:
48:d0:0a:0c:59:ba:4c:98:5b:73:a4:21:0a:bc:a6:
b2:eb:9b:ad:75:c8:9f:38:d1:08:ab:7f:1c:fd:c0:
ac:c7:30:6a:3b:ee:00:5f:a6:a1:8c:49:f4:05:90:
df:c6:4c:86:a8:17:b6:8b:1a:63:a4:a1:6f:e1:3a:
2a:b4:49:a8:06:c1:be:a4:0d:3b:73:ab:8c:6a:c8:
7e:3e:09:c2:57:dd:11:f9:d0:be:58:5a:27:1b:a6:
88:3b:31:b2:82:8c:c1:a4:f7:d4:7f:47:00:6b:de:
66:b5:f8:ed:69:43:b9:69:43:f6:b2:a0:85:0b:42:
f3:cf:81:db:5a:36:35:50:90:52:bf:29:9d:83:ee:
a6:91:df:dc:7f:78:fc:c8:d8:f2:dd:a9:60:83:8c:
b1:f2:b8:c5:da:c7:b2:56:48:ba:86:91:a7:09:50:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:CA:C5:1D:8A:62:3E:07:8A:E2:14:E5:22:DC:78:FF:DD:0D:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c0c4a6-a727-31c7-b6bc-4392a0215232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:0c:e7:ed:a2:c4:e5:ef:57:3e:95:8a:68:d8:b1:cf:3d:9c:
84:e5:02:b4:7d:36:2d:c3:41:6e:ed:93:f1:3f:85:99:af:20:
97:51:c6:bf:44:87:8b:74:cf:69:6f:38:be:3c:ed:01:a0:f2:
e1:a0:28:49:6b:ff:d5:49:f7:2b:22:b0:9c:25:60:d2:77:59:
2f:eb:7c:97:2b:63:3c:05:01:63:ed:3c:5c:d2:58:9c:26:bd:
17:10:21:86:c5:d9:ea:7c:1d:00:d3:ae:b0:46:e8:38:7e:ca:
40:06:64:34:33:48:1d:80:96:4e:da:bf:fc:6c:b6:37:ee:6b:
90:f3:82:c0:af:0f:6c:4b:fe:3a:02:76:8b:cc:c0:fe:cd:57:
ae:d0:d9:93:88:a2:8e:8f:cd:97:c7:db:0a:a9:22:99:2b:9b:
41:b4:86:de:a5:c0:88:78:20:3b:3f:13:2a:a9:b5:bb:62:05:
0a:23:ca:e7:45:f9:3a:8f:88:b0:62:72:da:24:92:35:23:62:
1b:c6:ee:27:dd:1b:6c:89:27:24:e6:8f:11:00:96:c1:62:41:
71:71:fe:e0:4d:b0:a0:ff:5d:9e:25:33:c7:af:bb:96:f3:d2:
5b:f0:ae:77:d6:5b:d4:63:37:49:83:31:d1:5b:0f:7a:5c:54:
e3:07:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:49:57 2025 by rpki-client