Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83b2a91-e308-3ae6-af5f-a587c16789d8.roa
File: c83b2a91-e308-3ae6-af5f-a587c16789d8.roa (raw, json)
Hash identifier: DGSUdMWrXzbFFLZeR4JR8NUc1ocEJ041u24j+DlYgAQ=
Subject key identifier: B1:EE:4A:42:76:AA:E4:D1:DA:DD:03:FE:9D:98:99:64:17:BF:0F:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10CAD258621677B90818A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83b2a91-e308-3ae6-af5f-a587c16789d8.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ca:d2:58:62:16:77:b9:08:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9a30c415-a493-40a1-864f-48dd32c93425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:97:73:d8:8b:06:28:bc:b1:ca:4f:49:94:
19:ec:a3:41:59:7f:b9:ca:1b:65:97:36:7f:16:9b:
85:ed:c0:97:4f:dc:d5:a0:16:af:17:af:64:96:1f:
db:28:d8:72:cc:dd:1d:a4:50:f3:35:4b:bb:a2:0f:
f6:cc:9b:1b:bc:13:bb:4b:5f:1e:be:a5:99:df:d4:
2d:bf:7d:80:23:f1:2b:fb:5d:f5:51:cd:78:db:4c:
9d:c8:c3:dd:6d:f9:e1:af:b1:b6:7a:90:a7:33:e4:
d6:25:dd:62:e9:80:c7:4e:68:e3:fa:49:50:1d:4e:
e0:64:d0:d9:7e:ab:11:0c:bc:30:4c:a9:a8:f1:94:
49:1e:a6:7d:0f:36:96:fa:5f:4f:dc:59:6c:7f:79:
3e:68:73:bf:6e:24:4f:94:32:c8:88:3f:11:ec:c7:
2c:d4:b5:bc:d6:11:84:9b:f0:3c:d9:89:99:5e:a1:
88:47:3e:18:ad:7e:1a:be:61:db:3a:3d:28:55:13:
cc:14:01:e9:1d:55:be:45:61:73:11:4b:f8:04:ed:
fa:d0:bd:b0:6d:7c:06:7a:a5:b3:ac:48:c9:f4:e7:
cc:eb:b6:33:cc:43:9b:70:eb:ed:83:c1:d9:30:70:
1e:72:7c:e3:ae:be:34:77:f0:af:58:ed:d8:4c:80:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:4A:42:76:AA:E4:D1:DA:DD:03:FE:9D:98:99:64:17:BF:0F:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83b2a91-e308-3ae6-af5f-a587c16789d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:bf:87:c3:dc:2c:57:02:dd:70:96:0a:14:14:55:23:47:99:
c1:e0:32:93:b3:e9:4f:32:a2:65:e1:a6:e9:95:3a:68:3e:2a:
43:89:07:d8:5c:dd:48:1b:d1:d9:35:25:72:9d:01:31:09:f2:
d7:7a:79:1a:79:f2:65:87:b4:fe:c0:00:81:33:2a:37:0f:a7:
94:21:2d:4d:99:4f:46:b5:b7:ce:35:28:44:51:4e:65:d5:2c:
bf:e1:57:a4:81:ab:9f:44:41:2c:f7:9b:b1:00:d1:4d:75:71:
af:4d:c0:b8:70:fa:74:b8:f2:a5:47:8b:0d:c2:6f:17:d4:16:
4a:8a:77:c1:5a:19:f7:4e:70:85:d5:91:80:e5:43:8a:32:ce:
50:4b:fd:3e:46:f2:a6:b4:52:bc:11:a6:45:61:ce:b8:00:06:
5c:44:f8:af:f9:57:14:53:ac:f9:43:74:04:6d:00:6e:0a:80:
6c:c3:32:2f:0e:7e:b6:5d:ba:d4:f0:73:c4:38:a3:ad:e1:c1:
94:19:a3:25:e5:61:47:2c:5b:90:ad:9a:4e:21:66:28:41:8c:
fd:c2:26:8c:36:4e:36:b5:55:5b:7e:ea:1a:eb:21:19:a7:12:
3f:99:56:6a:c1:70:11:e0:c7:10:d7:62:66:05:21:1f:1b:89:
7f:63:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:59 2025 by rpki-client