Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf62938b-ecb5-358c-ae37-081eb93fda63.roa
File: bf62938b-ecb5-358c-ae37-081eb93fda63.roa (raw, json)
Hash identifier: wkOUc4Lmic3DZFHBwIKFzc5UXJ0BI8EBxMdTykAqsb8=
Subject key identifier: 6D:49:F1:35:26:F8:71:94:A6:E4:D0:92:7B:91:D9:30:3B:D9:D0:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11EEDF4D000BF4091A1F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf62938b-ecb5-358c-ae37-081eb93fda63.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 24.0.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ee:df:4d:00:0b:f4:09:1a:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1d8be784-c794-4b81-939e-d9a22c5c21d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:a7:2d:45:78:7c:3e:4d:f7:db:68:d3:b9:
6a:2b:51:77:90:5c:b6:cb:07:9a:f7:03:47:22:6a:
ed:69:07:aa:f9:38:b6:98:db:93:fe:54:0b:f7:ba:
8e:98:4f:07:41:bd:7e:7e:70:16:33:d9:13:b9:0c:
e5:a1:c3:c7:d2:d5:d4:c8:59:58:ed:be:0e:cd:32:
19:64:79:d5:62:04:5c:8a:f0:d5:2a:40:71:84:4c:
2c:88:1e:0b:90:64:43:ab:52:12:fe:38:12:82:c9:
5e:8a:37:38:27:eb:98:ef:46:a3:17:0e:b6:8e:26:
44:fb:a0:e9:53:32:d9:1e:15:84:c3:99:6b:c2:62:
05:f9:b0:3f:e6:bc:4c:9c:f7:53:37:c8:a5:a7:12:
5d:a1:77:88:bf:84:d5:95:90:5b:8b:78:a7:09:d2:
3f:b4:86:04:a7:19:6f:d2:16:5a:75:3f:51:b4:0f:
25:99:6a:0b:9d:11:74:31:fe:4e:9a:a2:e0:88:57:
13:9d:53:b8:4f:e9:bc:91:60:ff:11:59:83:aa:04:
ad:95:b1:b0:43:ee:1f:23:ed:dc:11:4c:97:8e:8d:
2d:17:54:8a:0d:8f:9b:5e:05:e9:e5:34:8c:2a:ac:
1c:3b:22:8e:66:35:e6:ad:8a:46:cd:ac:db:3e:09:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:49:F1:35:26:F8:71:94:A6:E4:D0:92:7B:91:D9:30:3B:D9:D0:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf62938b-ecb5-358c-ae37-081eb93fda63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.0.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:34:37:b1:ff:bb:35:05:66:3e:d6:9f:f1:53:d8:b7:33:30:
76:ae:a8:fe:f5:63:5c:0b:8b:9c:d8:4a:56:a4:83:82:3c:c8:
b1:ac:35:44:28:6c:ed:55:db:35:62:12:a3:a6:2c:e5:5d:c9:
68:c6:0d:81:fe:84:ed:af:95:fd:5f:e5:60:c7:60:62:83:96:
c9:0d:47:18:4c:dd:93:81:6c:10:9f:70:5d:dc:f0:3e:62:09:
ec:6c:41:99:40:a2:1d:63:8e:83:23:1c:64:53:1b:72:a8:d7:
a6:7a:39:9b:3a:99:20:db:8b:30:31:d4:16:02:45:c1:4b:87:
bd:44:f5:13:46:99:92:8c:1c:b3:b7:20:27:a2:9d:9f:08:f8:
1f:fd:91:90:f9:f1:b0:41:ce:c7:00:b7:77:c4:ec:45:e2:5c:
88:f6:3a:61:96:9a:63:b4:7e:67:b4:b5:9f:1f:28:a7:21:e7:
2a:c3:ce:9e:d7:0a:36:61:ae:00:46:59:be:5e:64:07:14:16:
81:2a:15:ff:63:18:74:5d:c5:a5:f4:35:04:80:43:8c:ae:32:
cb:3c:8e:64:eb:f1:fb:2a:de:e3:37:bb:12:c7:e7:6a:e1:58:
7a:de:ee:8d:6c:10:48:2a:11:b8:55:4c:fa:1c:72:a1:62:db:
73:8e:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:27 2025 by rpki-client