Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c36bad48-7720-3150-9099-b576bafef06c.roa
File: c36bad48-7720-3150-9099-b576bafef06c.roa (raw, json)
Hash identifier: k/wo6e0tDLaYcNatRn5mqz3Dh2++1CzDWSZkeIi6lrU=
Subject key identifier: B9:4E:74:08:76:41:E0:7B:C6:83:02:09:6A:92:D9:C7:88:51:0B:A3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126D348D258FC4119F7580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c36bad48-7720-3150-9099-b576bafef06c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:6d:34:8d:25:8f:c4:11:9f:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e5213470-64bb-47d1-a15c-44fae60b8f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:46:fb:c6:78:2f:93:9d:8d:71:09:14:7d:
20:75:34:3e:bb:f4:01:d7:de:00:34:8c:bf:83:48:
ec:e4:7b:14:82:c1:00:e9:41:1c:ff:21:48:f7:5d:
a3:69:40:1f:28:75:35:90:99:67:cb:cb:a8:59:8b:
50:5e:f5:5a:45:36:88:88:e0:8c:3c:72:ca:06:fc:
37:c7:fd:3b:82:56:ef:bf:1f:36:26:7f:29:8d:05:
95:6f:10:47:1f:3d:16:e2:0e:90:f1:29:e2:ee:55:
21:a9:a1:c5:51:40:82:ed:46:14:8e:89:c1:24:c0:
51:2d:01:42:5e:35:8f:36:14:a6:af:63:56:99:aa:
47:c5:10:94:88:b5:3a:59:f1:f4:9f:45:47:3d:ee:
e0:05:1b:de:78:ef:8b:23:5d:45:e6:07:4f:c2:5e:
7f:f8:59:ca:48:0f:f9:70:92:e7:51:91:de:ef:80:
5f:dc:59:d2:1f:0e:3b:b6:ad:52:ce:73:61:b1:e9:
12:fe:cd:39:ed:6c:9e:c9:85:22:26:0b:64:be:73:
35:fb:e7:c0:9e:be:b2:19:3d:3d:84:5b:f5:a3:52:
f0:df:83:97:ca:5f:32:17:71:32:14:ce:20:69:0f:
fe:73:30:66:e3:b2:bc:f3:eb:c6:77:a7:31:2e:04:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:74:08:76:41:E0:7B:C6:83:02:09:6A:92:D9:C7:88:51:0B:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c36bad48-7720-3150-9099-b576bafef06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:0f:8c:8c:98:d5:1a:f9:d8:3c:d9:6b:7e:a3:0f:ef:41:26:
6d:17:1c:90:9a:31:e1:fc:ff:74:75:21:bb:ba:cd:f9:f9:3d:
ca:1b:e5:91:1e:b3:2d:f2:27:39:96:fc:6e:c0:86:7c:4e:39:
ac:3b:d7:7f:50:be:5b:2a:38:36:e7:18:59:cd:7d:d4:c8:c5:
52:76:4d:34:62:38:31:59:1a:a0:7b:9f:7f:6b:e5:40:60:ea:
b4:88:63:7a:12:1f:5e:b7:2e:3e:37:62:bc:e8:b2:15:20:4a:
42:b5:2d:79:75:4d:f0:c1:09:e2:88:1b:a9:be:2d:ca:e6:e7:
6e:03:0e:a4:0d:9b:6d:a0:80:1c:0a:6d:88:10:cf:94:07:ee:
4b:54:47:da:a9:78:41:48:a0:a7:a7:36:4c:2f:a9:7c:1a:4d:
45:06:fa:0a:c2:65:74:65:db:68:a9:69:7b:b8:7a:d7:cb:95:
8c:44:7e:ab:53:96:4f:2a:02:89:95:47:7c:9c:fa:bd:bc:64:
d3:9a:f7:9b:20:ae:a2:82:1e:1e:6d:77:e2:c3:ce:06:ff:7f:
ae:db:20:9f:c5:b3:bf:f9:05:87:d2:71:a9:a3:2b:c4:8c:50:
06:3b:23:6c:04:80:5e:49:7a:f3:62:c1:65:9b:48:80:31:e4:
29:64:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:26 2025 by rpki-client