Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cc734a-a9bf-3d1d-9684-201b720fe8a4.roa
File: b6cc734a-a9bf-3d1d-9684-201b720fe8a4.roa (raw, json)
Hash identifier: 9M5VE8T77ZReuoXh2VXRQzZbP5K6by0j/Lx+BmXhpsI=
Subject key identifier: B9:16:18:0B:AC:5E:E5:50:21:20:01:27:D8:F8:0A:26:CA:52:69:CF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126B9C510D222F89D2F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cc734a-a9bf-3d1d-9684-201b720fe8a4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.15.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:6b:9c:51:0d:22:2f:89:d2:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bbce77dd-2742-43f1-8b7a-d00a7b73b674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:00:ad:04:83:1f:72:8f:d5:be:1f:7a:13:7c:
78:96:bd:75:36:57:27:e0:b0:ce:a2:9c:a3:81:54:
38:ea:57:e1:b7:e2:38:70:89:24:b2:9d:a1:ab:af:
59:4c:4a:23:25:91:40:88:29:e1:c0:bc:3b:23:d2:
3f:8b:3e:e4:5c:15:f8:2c:2b:4c:74:3d:dc:1a:4a:
13:fc:a2:f0:39:94:83:f4:53:07:63:02:22:12:d9:
a7:d7:88:d9:d1:90:a4:b2:1d:24:4a:65:07:ab:d9:
16:f4:ff:98:3e:05:c0:50:0d:59:fd:a6:06:e5:38:
13:6b:c1:68:66:75:ff:45:c5:d8:43:34:15:71:ed:
97:32:47:d2:e4:f0:dc:b7:8e:fa:41:3c:40:55:84:
09:52:77:4a:da:f2:d0:73:8f:ac:62:72:20:8e:6c:
83:c1:48:97:69:d5:58:d1:c7:c6:38:66:bf:e8:c6:
a5:ae:18:6b:35:42:09:ec:cc:a4:f9:86:43:e5:85:
b6:b4:5b:09:d6:01:6f:2b:dd:40:29:fe:f2:39:d7:
3d:96:5a:b5:45:17:ab:1a:c8:42:cd:ca:e9:16:30:
df:7c:d4:f0:f7:38:51:e2:41:54:1f:de:92:f3:97:
bd:94:6e:33:51:f5:54:00:bf:b2:16:69:c9:8e:b0:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:18:0B:AC:5E:E5:50:21:20:01:27:D8:F8:0A:26:CA:52:69:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cc734a-a9bf-3d1d-9684-201b720fe8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.15.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:ef:6a:35:27:c0:61:52:7c:02:90:48:ae:7b:c6:59:5e:95:
60:4b:6b:53:37:86:bb:52:85:53:94:2c:41:1f:8e:34:d1:2b:
a6:a8:d2:e6:f2:44:64:6d:c1:9a:ee:36:b2:98:7d:dc:d6:35:
4a:b1:09:e2:f4:5d:c7:58:80:7f:3e:8c:72:30:b7:25:7c:5e:
df:8e:8f:15:c6:0b:2a:c9:1b:4e:e8:e8:9b:c0:aa:d8:46:c5:
86:92:14:75:17:eb:f8:ef:c5:ba:d3:57:17:fe:b3:c1:31:54:
06:21:d5:d3:e2:e0:d7:6e:7e:aa:cf:48:5c:40:27:7b:50:e0:
84:10:1c:4f:59:25:f4:e4:cb:01:90:83:b4:9f:29:6b:ae:00:
a4:e1:3a:2b:f9:0b:98:b1:2f:cd:30:8b:4a:b3:90:e1:bb:50:
4b:af:26:c0:8d:ea:d2:e1:39:59:c0:f2:3d:50:4a:e4:0f:33:
97:08:fc:45:64:19:11:7e:99:13:b2:70:c6:84:35:ed:95:20:
b3:23:be:f5:2e:6b:f1:52:f4:96:51:e3:b6:c3:58:7d:f8:23:
4e:9e:9e:d1:2e:26:14:07:03:c5:af:34:75:c5:2d:06:54:be:
78:98:f2:71:79:e8:f6:e6:f0:3e:f3:8d:c3:89:0b:8e:80:b0:
4e:8e:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:38 2025 by rpki-client