Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d632f2b1-399a-38bb-a0e5-09fe1955fa2a.roa
File: d632f2b1-399a-38bb-a0e5-09fe1955fa2a.roa (raw, json)
Hash identifier: fVA78OiI6Lry57ZIph6YeiXTSC1EKz73FimuNf6EMaM=
Subject key identifier: CC:11:A3:1D:2B:93:CF:1C:6C:79:73:EB:06:B2:BA:53:1D:29:61:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11779269A29C65697003E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d632f2b1-399a-38bb-a0e5-09fe1955fa2a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:77:92:69:a2:9c:65:69:70:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=64563c0d-6934-4c10-97eb-f8683e45d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:d6:f6:69:0d:9d:8f:a4:a2:12:31:fd:44:
db:1a:63:71:8e:fb:0d:aa:a7:e3:f2:e5:a7:52:50:
da:2a:23:25:93:f6:77:2e:8a:7e:18:45:75:3b:fe:
cf:1e:d0:a1:5b:95:fd:9d:cf:5e:46:86:88:b3:3e:
20:ac:36:07:4a:94:4b:81:15:7c:1e:b8:41:98:17:
d5:4e:28:98:51:88:0a:ac:6f:f7:2d:7d:65:8e:6c:
5b:3b:1b:dd:eb:3a:58:d9:b2:3b:ef:56:4b:52:7e:
04:85:c7:8c:f8:d4:dc:d7:65:46:43:04:f2:c9:71:
d2:c6:32:f4:f1:3c:03:92:ee:fb:f7:24:0e:21:93:
2e:42:91:94:56:fd:d5:24:2f:bd:76:7d:a9:8c:2c:
e2:5c:3f:17:1b:06:eb:74:d9:7f:14:7b:a4:9f:4e:
46:ca:3a:51:a3:de:1f:90:d1:a2:58:c7:47:15:47:
40:c3:62:c1:12:0b:63:bd:a8:ce:1c:d3:a6:44:f3:
42:8f:8b:af:1c:5f:e2:1e:f8:c0:bd:6e:52:ea:fa:
07:e2:56:6e:5b:31:34:b7:1c:3f:15:5e:66:b6:b5:
a3:01:09:26:67:77:b4:05:02:a4:36:8e:04:e8:86:
39:95:f4:54:bd:eb:30:f3:c9:b9:97:e8:f3:d5:2d:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:A3:1D:2B:93:CF:1C:6C:79:73:EB:06:B2:BA:53:1D:29:61:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d632f2b1-399a-38bb-a0e5-09fe1955fa2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:0a:4b:7b:58:fb:8c:cc:82:87:a8:16:dd:3a:df:ee:7c:f7:
ce:81:af:f1:12:b0:50:c4:d7:45:1b:dd:a8:b6:34:b1:31:2d:
ee:c5:db:45:88:70:49:8b:e9:c1:b4:16:f3:2b:d7:46:89:ba:
ae:00:8e:88:ed:c4:63:d4:43:d8:63:90:1c:09:ae:92:9e:33:
a7:b1:ff:24:c7:61:19:7e:6c:07:af:c9:c3:a3:25:5d:f0:c2:
03:09:5d:ea:96:2e:01:cb:ca:9f:4d:34:69:48:00:a3:00:06:
76:d2:06:e9:f7:98:a3:d0:64:49:90:37:27:62:f8:70:b1:51:
17:42:00:74:03:69:63:a3:e0:38:3c:b2:45:5c:8b:2d:52:62:
6f:01:6a:a9:be:0e:31:8a:ae:36:6b:2b:44:4e:62:c4:3e:06:
e2:11:92:b0:bb:57:9d:de:02:d4:cd:a3:e3:77:73:48:1b:96:
82:d5:70:61:61:de:cd:43:17:04:a6:9e:45:34:f1:9e:ed:53:
f8:27:75:65:f4:d5:c3:81:81:8d:23:af:a2:55:3c:f8:37:4e:
f6:87:c0:0d:c3:76:9d:db:75:c2:30:e3:0d:02:5d:1a:52:28:
8a:0e:3d:0e:78:90:3a:0d:0c:c3:b3:38:55:d9:38:03:8a:27:
49:3f:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:46 2025 by rpki-client