Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3bdb0e0-6de5-3a2d-a118-2dbc6ac822ac.roa
File: b3bdb0e0-6de5-3a2d-a118-2dbc6ac822ac.roa (raw, json)
Hash identifier: AlMxn+UGdfv1bsfDjj455iALGzvBkM0wYXF4KXHEXyQ=
Subject key identifier: 6B:3B:A6:6D:87:AB:B5:36:61:01:D0:B7:23:72:93:3B:11:90:71:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12653A681E74271B5FF1E4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3bdb0e0-6de5-3a2d-a118-2dbc6ac822ac.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.12.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:65:3a:68:1e:74:27:1b:5f:f1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2e2efd52-c6c2-4d81-8d49-f9bbaff7a430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:28:8e:e8:65:9c:d7:50:89:58:b2:49:dd:
4d:89:8f:8f:42:31:a8:49:84:30:f3:fa:1b:ef:5e:
d0:0c:bf:67:3d:c6:e2:19:90:3a:7d:0a:9b:a5:82:
4b:d9:77:cf:da:0f:ea:cb:d8:83:c8:6a:46:b9:8c:
63:cf:28:fa:e4:3f:14:96:a1:0e:c0:33:5a:e4:60:
88:a1:d3:e0:27:a0:75:ab:23:ca:9b:91:02:6e:d6:
4a:44:1b:09:1c:51:93:f8:aa:b5:a1:b8:e8:be:d5:
90:32:64:2e:42:11:b5:89:02:ad:20:06:65:6a:9a:
46:e5:59:11:6f:45:9d:c5:64:8c:f4:e5:8e:83:90:
66:58:e5:84:6e:82:d7:bc:29:3a:af:94:15:bc:c6:
f8:34:a4:50:21:5a:28:a4:cd:db:57:36:41:ca:0d:
72:7c:2b:71:03:04:41:73:98:cb:e7:0b:d7:27:46:
fd:c3:ad:3b:d3:17:20:a1:7a:fd:b0:3b:cb:56:4d:
0c:ef:c2:6b:a1:63:7d:74:f3:84:b6:a0:37:a9:75:
a0:9d:75:21:d6:f4:45:7b:fd:83:42:b9:a2:e4:1a:
57:38:60:3e:67:5d:c5:2c:e2:8e:85:1d:a9:93:9b:
d4:cd:20:13:01:fd:34:13:11:6a:23:4c:b2:77:69:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:A6:6D:87:AB:B5:36:61:01:D0:B7:23:72:93:3B:11:90:71:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3bdb0e0-6de5-3a2d-a118-2dbc6ac822ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:81:60:db:95:94:77:1f:05:2a:44:b2:7d:dd:0b:b9:9c:44:
49:34:c9:88:b7:06:9c:b6:6e:f1:71:ff:bf:6c:52:4a:29:38:
d8:05:af:00:32:ed:d2:03:c1:d7:17:fa:fd:63:8f:a2:06:17:
c2:fd:64:83:e6:50:be:db:d2:08:81:86:09:fa:34:04:87:7f:
d6:ae:9e:70:51:96:ea:e9:7e:38:83:c0:aa:21:c5:24:11:e9:
4f:49:f0:c3:5d:61:37:0f:99:ad:b0:dc:97:53:17:d9:c4:22:
9e:16:6f:bf:a3:b1:6a:2a:2c:00:46:52:f2:ce:86:3c:14:b7:
eb:18:89:fd:75:6c:ea:b4:b0:03:bd:a0:ef:ff:d0:b9:a0:70:
74:63:a8:dc:f0:e5:ef:f2:80:4b:8f:b9:ad:5e:22:5c:3f:55:
94:b7:3c:2d:3d:47:19:40:35:98:ae:74:f0:6e:17:6f:c7:65:
31:94:bf:8a:d8:cc:a9:7a:3a:46:2e:dd:a0:66:94:b2:75:76:
aa:e3:c8:f8:d7:dd:f6:47:c1:a3:01:9d:7b:19:e4:de:cb:7f:
24:92:de:11:ee:1e:67:f9:77:aa:57:83:42:55:92:b0:57:e7:
2d:1e:d8:02:d4:fb:5c:4d:5b:f7:c9:cb:3a:ed:7e:f3:45:23:
61:4b:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:06 2025 by rpki-client