Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaab581f-366e-3a3b-a4e1-cb00f092e73d.roa
File: aaab581f-366e-3a3b-a4e1-cb00f092e73d.roa (raw, json)
Hash identifier: xiXy98rYkhFQWjmbPUdPCJcbQW3xLMFBwvXPEoxK3HI=
Subject key identifier: 78:B6:06:85:42:69:3E:12:53:60:9B:28:39:5C:88:62:AA:C7:31:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1340A5DBF4F81A4458A500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaab581f-366e-3a3b-a4e1-cb00f092e73d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:40:a5:db:f4:f8:1a:44:58:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6f5a8a61-6c1d-4c6b-b42d-fac8fe81c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:c0:c9:2d:fb:f7:fa:fb:7a:94:f9:52:ae:
d2:e7:e3:38:a9:51:6d:4c:1f:e6:84:18:e1:85:66:
e9:f5:74:15:4d:77:40:d2:dc:3b:d2:4a:ec:b1:39:
55:98:fb:b6:68:e4:31:09:5e:59:15:ae:8c:55:6e:
cc:d4:88:42:9f:94:b0:17:84:24:1b:b3:7a:ac:06:
cc:4a:b1:c2:d7:47:6f:53:06:e1:7c:cb:38:ba:c0:
a2:b6:95:f1:f4:65:5e:f1:15:52:ed:34:cd:2b:d8:
bf:8e:58:ab:66:d2:35:98:60:e7:a5:e5:60:3a:09:
a5:40:55:ee:90:50:cc:6a:6a:f2:a8:c5:7c:e4:96:
35:bf:5b:f5:24:db:bd:f8:c1:81:c8:0d:c9:75:17:
2e:91:c1:de:2f:fd:28:7f:39:c3:79:91:ec:f4:48:
d4:03:c5:64:b2:c4:19:1f:d0:30:e3:12:70:34:21:
8b:d9:e3:d1:50:a9:21:ab:d2:7c:af:c7:97:0a:56:
0c:de:d9:d1:1c:32:05:7d:17:fc:7f:56:e3:7b:4d:
07:23:94:59:18:bb:63:d8:d6:99:43:e0:a3:e4:bd:
de:a7:90:97:8a:72:04:f9:f1:b5:be:70:22:22:ba:
04:b1:ad:c3:39:88:ce:9c:a8:28:a2:e5:bc:c3:0c:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:06:85:42:69:3E:12:53:60:9B:28:39:5C:88:62:AA:C7:31:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaab581f-366e-3a3b-a4e1-cb00f092e73d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a8:e1:7a:cd:a2:d0:97:61:f0:98:b1:39:27:b9:6f:92:78:
c6:31:41:d5:d4:d7:54:c0:46:b8:85:a9:60:9d:26:8b:3e:d4:
d8:83:3b:ca:2e:4f:b5:05:84:72:9d:46:25:3b:5d:3b:1e:2a:
bc:4e:8b:d9:81:5a:6a:22:10:f1:0a:70:29:35:76:ce:f4:91:
13:c4:3d:98:2a:f9:c5:c4:90:53:df:46:83:1d:75:c3:c4:9a:
ff:2a:9b:53:d0:9e:e9:45:fc:5c:3e:b8:8a:5e:44:0f:ee:9b:
e0:83:97:0f:dc:be:db:d1:5d:99:bd:95:06:aa:97:d6:bb:fd:
52:03:aa:72:4c:d9:74:97:c5:f7:44:79:cb:ad:31:49:e2:8d:
2e:a5:6e:a5:9b:8b:25:5e:85:81:7d:f1:13:d5:61:93:d1:51:
65:8b:89:f7:e1:9c:e8:cb:0e:c9:f4:ff:44:e1:d2:c9:1e:5d:
bd:7c:64:bc:b1:c4:ba:db:04:ac:42:ef:97:61:64:0f:71:77:
68:87:5a:9f:d7:97:7f:e8:c1:a7:64:d6:53:dc:71:6c:5b:37:
d4:06:e7:e4:8f:6a:94:eb:be:2d:dc:4b:97:46:df:38:cd:73:
1f:f4:cb:08:70:7e:19:c3:cc:bc:54:79:ee:6b:21:81:c0:b7:
68:66:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:53 2025 by rpki-client