Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e93a60-6f12-3f36-ae20-37f837d6c899.roa
File: c8e93a60-6f12-3f36-ae20-37f837d6c899.roa (raw, json)
Hash identifier: fKIegXHFS9enj3Kxxn39ZJXu0h0LlyZjsZfRL0ZXkuM=
Subject key identifier: 78:D0:96:FF:19:15:A2:F9:73:8F:D7:CC:0D:0A:5D:66:1F:57:A7:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C117B590149331CC876A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e93a60-6f12-3f36-ae20-37f837d6c899.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.7.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:7b:59:01:49:33:1c:c8:76:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bb4193e9-d718-4dea-b796-2c321d56fcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:17:06:f9:66:1e:d4:b7:7e:1d:45:a9:d2:
7e:74:0b:00:27:eb:b2:97:3f:2c:1b:38:95:7e:47:
b3:ae:e6:6b:49:44:e8:f6:a0:26:78:bb:46:ba:5a:
31:f9:54:66:b3:a0:13:9e:39:08:6a:18:f5:90:ba:
d2:db:ab:9d:4a:d9:e4:13:5e:4f:8e:c5:71:8a:59:
3a:54:55:4e:c0:99:91:f3:f2:f5:ab:bf:75:85:1b:
16:d3:e5:b4:33:25:bd:62:0c:00:ef:a1:1a:7b:28:
16:33:9c:93:87:cd:a7:bd:49:01:3a:12:d8:8d:f2:
38:4e:14:6e:19:d7:c4:47:3a:a2:7b:85:06:70:08:
44:8e:cc:ef:e9:20:c5:f8:28:ae:48:d6:bf:3d:b7:
f3:d4:0c:ee:95:33:2e:0c:c2:03:93:9a:03:7f:88:
6b:74:f4:74:0d:33:52:7d:be:4e:81:07:70:db:96:
cd:ff:3d:ee:a9:a2:0d:b2:12:73:f8:d0:fb:93:2c:
50:2b:c8:b7:9a:6f:93:04:03:3a:50:12:61:fa:0c:
d8:da:8e:51:19:67:92:ae:2b:e3:9f:df:be:d3:88:
c4:58:06:6c:1a:c8:e7:24:2f:4a:e9:c0:96:e2:96:
8f:b7:b5:29:bc:88:a9:4f:f3:40:75:fe:a5:bf:24:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:96:FF:19:15:A2:F9:73:8F:D7:CC:0D:0A:5D:66:1F:57:A7:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e93a60-6f12-3f36-ae20-37f837d6c899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.7.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:e2:c9:01:19:02:f1:6e:d3:77:41:7a:b6:05:d6:88:90:3e:
be:b2:67:a8:28:26:cd:69:80:ed:43:6a:6f:40:30:48:86:71:
2d:1b:52:6d:f0:8e:05:df:d7:63:b0:fd:da:c0:7d:57:7b:d4:
65:cd:12:b7:27:69:1d:47:c1:75:d1:53:15:12:38:81:32:03:
1a:ee:09:3e:a6:e1:c9:f6:e1:81:8a:a9:42:74:ab:33:35:15:
ef:47:68:10:7e:02:f1:27:4c:48:d5:52:91:dc:dc:4c:74:3e:
4f:bb:fd:6d:26:a4:98:e0:ce:15:e3:b2:c0:22:60:f2:86:2a:
c8:f4:3d:be:74:c8:b7:f8:cc:30:a8:d8:50:38:f6:9f:20:fe:
e5:ae:89:25:01:de:7b:55:b1:40:11:7d:e2:56:8d:35:8a:1a:
db:b0:c6:63:21:89:42:d5:f6:06:63:4e:4c:66:3f:40:3c:b6:
70:db:85:dd:cf:42:99:1d:42:d9:b1:38:86:3b:22:f8:0e:7e:
c5:9f:08:c6:60:05:c4:61:d4:9f:d1:2d:9f:7a:54:d1:06:97:
57:7d:43:72:e8:37:d3:ee:27:26:5d:e9:ca:db:6c:aa:17:17:
e1:73:58:c7:91:a5:a1:71:71:c7:7f:44:db:14:06:10:45:9a:
a8:9e:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:28 2025 by rpki-client