Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e0cf0f-4cce-3854-bb7f-3db83c63fc2c.roa
File: d4e0cf0f-4cce-3854-bb7f-3db83c63fc2c.roa (raw, json)
Hash identifier: oqgyHoaduhShWweq9v9sj3RGRO4jRe1WZjtf+R7klL8=
Subject key identifier: 32:3D:B4:D5:B2:28:36:65:11:F7:60:58:62:C4:EB:3F:2E:BB:AB:AF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D9527CED7CEC278BFC400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e0cf0f-4cce-3854-bb7f-3db83c63fc2c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.60.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:95:27:ce:d7:ce:c2:78:bf:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=434471c4-5085-4086-ae61-703efe31cdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:96:df:9f:c3:09:52:75:0f:31:8a:38:b6:
8b:13:cb:d6:6b:03:3f:b8:47:f3:de:83:9d:16:8e:
81:45:f8:8c:f5:38:4e:24:c2:50:82:1c:6c:61:55:
be:21:46:e9:a9:52:1e:3c:b4:e5:0c:55:4c:7b:9f:
a0:fd:b5:40:6a:91:61:a1:d3:6f:63:33:45:e4:ea:
8d:eb:ae:cf:83:1d:1f:ed:13:f3:2f:c0:03:14:d1:
b9:0d:83:f3:ca:fa:40:f5:55:80:c3:64:8d:74:1e:
f3:b5:4f:c7:a9:77:2d:58:37:e7:17:14:e0:ca:c3:
bc:69:ed:8d:ee:30:77:bd:a4:74:99:8d:30:20:ed:
6e:34:ff:e1:4f:e2:f0:0c:36:76:7a:9a:bb:f3:c0:
9d:12:1a:c6:91:72:67:0b:7a:93:85:e8:e7:7c:1e:
e9:95:71:a8:7c:3f:3f:9c:d5:0b:9f:28:97:10:4a:
cd:f4:4f:5a:b1:cc:8f:c4:e1:2b:40:97:63:53:42:
4c:21:f1:21:af:b0:20:36:62:4e:54:ff:b9:9b:dc:
39:32:fd:a0:33:9c:81:06:c9:f6:83:e5:be:50:20:
d1:5d:dd:59:fc:95:a6:95:38:ff:8f:c1:92:2b:20:
3d:13:a2:6e:68:32:b6:bd:68:b3:d4:bf:b3:29:db:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:B4:D5:B2:28:36:65:11:F7:60:58:62:C4:EB:3F:2E:BB:AB:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e0cf0f-4cce-3854-bb7f-3db83c63fc2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.60.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:bb:80:ea:87:f3:50:64:28:db:00:b5:b8:f2:22:87:64:3d:
24:4c:cf:c0:d5:37:14:ec:40:02:55:cb:1c:04:11:a1:4d:67:
12:b8:94:25:ad:38:25:ee:1c:20:9a:8f:d9:e5:74:a9:83:b6:
91:e0:f9:f8:5c:0d:57:86:c2:8b:d7:2a:43:5b:4e:aa:03:06:
3a:84:bd:66:f5:b4:66:95:2a:df:c9:3b:05:ae:b9:31:b9:03:
ab:4a:a5:ee:10:bf:fd:57:f2:da:fd:c4:cc:40:5e:f1:b2:13:
ac:92:b2:6e:35:d9:73:f7:df:38:ff:fe:06:db:c7:85:50:3f:
ea:38:fe:1e:bb:34:5d:8b:d5:16:bf:8c:b8:0f:f6:3c:17:de:
fd:04:60:c8:8d:e5:b1:fa:e8:13:84:db:49:91:0c:50:56:b6:
9b:3e:21:9a:37:98:3e:9e:d9:56:1e:bf:5e:32:52:bb:1d:ff:
23:33:f2:b7:bd:2a:f6:79:e8:5e:a3:7a:99:05:1e:33:05:44:
6a:1b:0a:37:58:9e:04:80:0d:de:14:bc:13:ed:e2:17:48:51:
96:84:dc:39:53:4e:da:2d:50:c3:b6:b2:9e:53:38:a9:d6:08:
7b:38:85:7d:07:36:be:58:05:04:a0:b4:0b:bb:f1:4a:6a:8f:
d9:6a:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:17 2025 by rpki-client