Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8efb83a-eacd-3af1-8efb-7cca2a7426d6.roa
File: d8efb83a-eacd-3af1-8efb-7cca2a7426d6.roa (raw, json)
Hash identifier: 0Hm8FQCp19eh5QMCRL3dOD9Qr05xJ6dt0PU1iVwbWqY=
Subject key identifier: 1F:3D:AC:A5:2E:E6:C0:E5:6E:DE:F5:36:CE:0B:F1:1C:E1:C1:75:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DA7445DD891C6D4510CA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8efb83a-eacd-3af1-8efb-7cca2a7426d6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.91.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:a7:44:5d:d8:91:c6:d4:51:0c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5922c232-d963-4a5b-b081-2be6e4aca6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:15:e8:21:91:2d:16:7c:95:d1:c0:88:e6:
56:e1:eb:d4:08:5b:49:6d:61:c5:6d:39:0b:0f:b7:
ad:11:77:2f:14:09:a9:40:ef:a9:2e:d5:6e:51:02:
67:dc:b6:5e:ca:68:6b:05:40:de:3d:8d:18:8f:3d:
90:2a:fc:a1:25:40:b6:00:54:2d:b5:6a:be:05:17:
bc:09:86:b4:04:6f:d5:0e:ce:e0:c5:98:db:f2:3a:
cd:43:66:71:5e:d5:17:30:6e:97:57:c2:51:ef:21:
c8:d7:10:48:cb:bd:1d:10:a8:f0:4c:b3:14:59:d0:
23:d5:ea:c9:54:b1:26:cb:36:2c:59:7a:43:c4:0c:
07:6a:1c:01:f5:1a:0f:3a:9b:5a:40:9e:ea:08:89:
03:21:f8:89:fd:e1:f0:26:40:c8:24:8a:0c:87:06:
99:69:ec:1d:26:37:ef:3e:92:c6:58:49:09:cc:47:
4a:c0:61:b1:50:6a:9c:9b:18:6f:e1:bd:45:36:28:
e1:a0:be:74:26:d5:8f:a5:33:6e:4f:ec:67:48:64:
a0:60:4a:be:0a:c4:39:63:29:29:0e:e8:35:41:8a:
32:db:a3:ab:0b:fb:8b:23:b9:17:8d:c8:9f:e3:55:
7d:61:35:6d:7d:04:e6:e7:94:2c:c8:9f:09:31:35:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:AC:A5:2E:E6:C0:E5:6E:DE:F5:36:CE:0B:F1:1C:E1:C1:75:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8efb83a-eacd-3af1-8efb-7cca2a7426d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:60:a9:c7:45:7c:a9:41:10:cc:5b:3a:92:35:34:43:7b:5d:
28:1f:b0:42:da:0f:e9:de:2b:85:cf:bb:fe:a5:c7:ef:6f:60:
ed:d9:80:c8:77:00:d9:df:32:e9:98:9b:95:16:a7:37:0f:61:
46:1a:3d:0a:50:18:32:f5:ef:6d:10:f3:b6:c6:a7:68:60:b9:
e2:c6:6b:5e:75:cb:2b:ef:01:73:44:15:54:19:dc:c6:36:35:
4f:15:3a:f4:03:a0:dd:77:99:1c:40:b9:45:63:3d:e0:13:cd:
7e:c5:23:8b:c9:27:1d:97:b8:20:c8:1f:74:02:50:00:a8:96:
94:be:66:8d:3b:14:8a:d2:d9:54:95:50:df:67:14:5e:27:8e:
3c:05:2b:64:41:e9:e5:28:16:79:80:09:29:0f:eb:b6:0f:44:
39:c0:0e:dd:12:ab:ee:b4:3e:f4:dc:cc:fc:f6:e4:40:fd:12:
d4:d4:55:3b:8a:08:04:2b:3c:66:a3:66:af:ea:7d:dc:8c:aa:
20:66:4e:37:90:f9:1b:ce:66:2e:b3:e0:68:ab:46:46:b9:a6:
a9:50:7b:fc:dd:ec:40:11:ff:2d:ea:89:24:73:90:0b:71:ad:
af:a2:d8:3e:43:13:be:5b:e3:d9:be:af:d2:ef:34:f7:fe:df:
cf:86:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:39 2025 by rpki-client