Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2880ef8-1096-3a3c-880a-19ba8fef2cbf.roa
File: b2880ef8-1096-3a3c-880a-19ba8fef2cbf.roa (raw, json)
Hash identifier: YK3ttUewyNEmMSDzx8jVYs1qsgboh/TBbMsRi0MngxI=
Subject key identifier: 1D:F1:57:0E:25:56:C8:BE:82:30:19:FF:AA:D5:EC:58:F2:FF:4C:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1351AF9B613BAB13686080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2880ef8-1096-3a3c-880a-19ba8fef2cbf.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.6.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:51:af:9b:61:3b:ab:13:68:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c44a75d4-db0e-4c63-b6d7-dbc6317b80e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:25:f6:2d:cc:da:65:d8:93:86:42:48:ce:
d7:ae:21:41:aa:4a:dc:d8:9c:61:74:ce:38:02:ee:
09:7b:fb:a4:ae:c5:d4:c1:fd:cc:54:e3:98:0c:b6:
63:ab:4a:40:be:03:d9:27:8a:64:ab:76:25:8b:fb:
0a:65:31:2d:3f:44:5c:d8:2a:ba:40:09:d7:32:58:
91:db:b5:ed:6f:81:0d:bb:d7:0e:8a:44:5d:2d:43:
9c:39:8a:9e:f7:e6:03:53:5a:9a:dd:68:12:b8:c5:
56:6e:95:dd:e8:e2:99:0d:46:75:80:06:7d:a2:d2:
69:b0:b2:76:61:b5:d7:93:af:4b:25:2d:1a:78:bf:
a0:ee:34:a5:ff:20:99:e1:69:cf:23:29:f1:91:69:
53:d0:98:18:f4:a7:f2:e1:94:bf:69:7d:2c:be:97:
85:a1:a7:3e:f3:94:e0:0d:97:7f:ef:92:58:3a:31:
e8:bf:5e:15:3a:f0:bb:9c:8b:77:68:96:be:4f:e2:
6f:f2:a0:2f:b6:10:70:da:e8:12:5e:f3:c9:fc:e0:
87:25:b0:c1:d8:0c:03:e4:4c:ab:d6:9e:2c:98:56:
69:ff:39:8b:03:c0:02:96:88:88:a7:49:ab:e4:65:
fb:84:9f:9e:07:b7:be:2f:85:c0:e4:85:01:72:af:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:57:0E:25:56:C8:BE:82:30:19:FF:AA:D5:EC:58:F2:FF:4C:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2880ef8-1096-3a3c-880a-19ba8fef2cbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.6.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f1:b2:0e:4f:e7:26:36:8e:a6:9b:27:36:c2:ce:fc:90:7d:
85:6e:5d:f8:b0:fd:e4:a0:d5:fe:74:06:12:b0:19:7b:34:c6:
10:61:62:75:e5:f9:1f:bd:77:65:a6:12:95:8b:ce:ba:9f:60:
25:cd:2b:81:70:eb:f4:24:51:f7:ee:85:72:b5:62:08:f8:96:
0e:2b:17:5f:38:94:39:ee:58:3c:48:1d:c8:9d:31:21:06:f5:
e9:1a:bb:30:ae:fb:1e:18:5b:43:15:db:f1:61:13:c0:cf:95:
df:3f:33:e7:6e:aa:5b:33:69:c6:d4:19:7f:59:b0:9d:1d:a7:
4d:12:31:9f:a2:87:49:5f:ef:d2:a7:d8:39:a1:fa:76:3c:ae:
e1:6a:bf:9b:18:a7:76:6f:d0:8a:f9:60:c1:f4:9c:a1:e1:40:
b4:20:9c:f1:44:97:99:14:e6:ad:93:52:0b:35:5f:61:c8:fa:
66:4a:a8:35:b5:46:e7:97:38:26:48:ae:4e:81:51:2f:2d:07:
32:51:cf:81:14:95:6b:98:e2:65:fb:3e:6e:db:28:93:b8:a0:
81:67:73:6b:b7:17:f1:0d:49:c6:1d:fd:bc:8e:31:a8:e7:d7:
1a:54:94:d5:47:84:3f:3b:08:9a:7a:d6:1c:b8:41:de:35:94:
a7:70:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:13:55 2025 by rpki-client