Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa
File: ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa (raw, json)
Hash identifier: LolMUsTfbmE8EolO0zAcFpz3f8Oged3B7EgdMfvSa04=
Subject key identifier: B4:5B:F8:69:E8:FE:7F:21:70:EC:F5:AF:30:BD:C0:E5:CD:66:48:4A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A8A0AB942798B8BB39700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.21.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:8a:0a:b9:42:79:8b:8b:b3:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=68f1ec6a-4fb7-4089-b3c2-6a3e8dfb5947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:91:32:70:55:b0:85:e9:b8:f8:d7:27:15:
91:84:51:15:b2:6a:a2:08:78:b7:e1:f8:06:5c:63:
16:65:48:72:91:19:f5:77:40:ae:4c:d9:89:e7:7b:
3d:87:79:de:a7:28:bc:c6:a0:74:e9:22:bc:21:fa:
00:6f:91:3f:2f:99:43:9e:14:a5:42:6a:0d:d5:b4:
ca:ff:11:73:75:f1:f9:83:da:98:14:2a:6a:a4:2b:
7b:90:71:db:4f:18:67:40:05:20:81:72:74:c3:35:
cf:d6:28:7f:b9:51:5d:51:55:46:17:e1:a4:d5:b1:
ce:55:8f:64:fa:dd:75:78:2c:8d:b2:5d:0c:e6:f7:
8e:1b:30:ef:75:f2:50:ed:f6:76:f0:8b:01:85:0a:
5b:d9:c8:6c:cc:77:6d:25:d5:af:3d:41:6f:14:3e:
e4:57:d8:74:75:18:98:a5:10:1b:72:1c:87:3a:c0:
d1:20:27:85:bb:dc:69:df:5e:d9:8c:77:74:45:c4:
d1:6a:8a:0d:f9:a7:b3:d6:9f:92:90:2e:4b:92:76:
6b:ee:76:44:4c:de:3b:a4:41:3a:77:94:2d:d4:ce:
18:0f:a4:7b:9a:79:45:bc:1b:94:34:9d:33:fe:0b:
f3:ae:7c:d7:ac:23:a4:cb:34:8b:2e:a5:f8:45:f1:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:F8:69:E8:FE:7F:21:70:EC:F5:AF:30:BD:C0:E5:CD:66:48:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac2f38b7-5e0b-3e00-a1b2-2fa51751a7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:22:45:ce:ac:f4:91:40:21:cf:2b:b3:50:4f:d8:1a:e5:be:
51:69:41:b5:9d:ad:d5:90:04:40:52:f4:12:d9:86:b6:09:3d:
4e:26:86:30:1c:75:76:1f:fb:ff:a7:02:49:93:3d:fa:de:85:
ac:da:d0:af:d5:9c:b4:ec:a6:95:e6:35:b5:4c:ef:98:41:db:
61:d2:7b:fa:83:bc:42:e3:bc:0e:a3:eb:7a:77:82:42:19:64:
9e:b1:6b:ce:af:9b:38:66:f1:23:fe:25:ff:14:d5:e8:b4:5a:
16:0e:4a:b7:bb:d4:2c:df:62:89:75:33:41:3f:9d:d4:d3:b1:
5c:d6:c8:14:ae:65:bd:d4:1c:d9:14:74:64:51:4f:0d:f0:0c:
ef:98:af:f6:5b:57:b6:12:a0:d2:8c:4b:30:4d:3e:77:c3:5c:
61:1d:23:d6:e5:0d:2a:aa:b4:b3:5d:b5:e6:5a:a4:12:b5:c7:
3d:3a:18:5f:0d:12:17:66:c7:fc:80:b7:3d:65:4f:38:bb:de:
32:e0:8c:e8:48:fe:89:02:16:4e:60:80:e5:a6:30:b3:c7:7f:
dd:58:f8:28:1b:c6:93:98:74:47:7e:99:2b:a9:d8:96:80:38:
e6:4f:80:f5:f0:aa:90:1f:da:6e:b6:db:a0:5d:b2:16:dc:b4:
a6:09:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:15:11 2025 by rpki-client