Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da693cd7-fdfc-347d-b9d7-cb52235da12d.roa
File: da693cd7-fdfc-347d-b9d7-cb52235da12d.roa (raw, json)
Hash identifier: 2lI8PWi2w6ylsUpdxI75maS9D2fTWe8cjudlztqylb4=
Subject key identifier: 7A:F1:02:E1:1D:52:52:0F:12:BC:03:D4:2B:F0:8C:3D:0D:6B:BD:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CE9EF228FB1C5782BD700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da693cd7-fdfc-347d-b9d7-cb52235da12d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.20.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:e9:ef:22:8f:b1:c5:78:2b:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=52ddcf7c-da42-410f-8ef8-86cc773fcb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:e2:0d:2e:d1:b2:5f:7d:2d:24:7c:fd:56:
71:90:e1:74:9d:1c:c2:fb:11:c0:c3:f2:d7:33:93:
1a:37:fb:42:d0:9c:0c:6d:f5:82:2d:e2:ac:52:9e:
de:5c:7e:ae:46:49:39:d7:66:67:ea:a1:0f:63:47:
95:63:88:70:76:0a:f1:20:0a:02:f8:74:07:d5:a8:
b9:cf:0c:55:68:77:79:90:4a:f0:99:c6:83:da:a2:
ed:41:19:a8:1c:7e:81:aa:c9:eb:ac:2f:3c:cd:f8:
fa:94:9a:d9:7a:b8:c3:20:ee:72:b3:9c:35:23:2a:
89:76:91:b2:ca:11:27:43:fc:66:0b:31:81:c9:16:
02:ab:ff:80:6b:ef:c6:2a:a6:e5:da:fd:95:4b:3a:
90:71:90:13:92:8b:ce:53:0d:36:28:59:7b:fb:5f:
f1:53:72:ca:9b:24:b1:16:d1:2d:62:ac:71:d2:00:
81:a3:ae:f5:aa:e2:e1:f5:61:82:75:94:e1:0f:da:
25:1f:c5:53:34:6a:50:0a:a6:ba:e3:a2:14:49:87:
33:1a:bd:64:f1:fa:8f:e7:f6:97:c8:83:bc:1f:d0:
31:6a:f3:77:a1:e3:22:9c:ec:74:42:bd:f3:61:d1:
f9:f4:49:b6:e7:09:b8:5b:88:dd:85:98:fc:30:5f:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:02:E1:1D:52:52:0F:12:BC:03:D4:2B:F0:8C:3D:0D:6B:BD:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da693cd7-fdfc-347d-b9d7-cb52235da12d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:5b:7c:e3:cb:4e:5e:a8:c7:fc:3e:d9:66:12:ab:ce:51:6c:
b0:76:c5:57:bd:72:ce:4b:d9:60:63:e5:a5:a9:1f:80:39:e7:
fa:a8:69:bc:00:a1:77:fc:b5:33:0c:29:85:16:f3:2e:ae:a6:
d2:a0:26:e7:0b:f7:5b:1b:da:d8:32:6e:49:63:01:47:01:ef:
17:e1:1a:ce:04:0f:2f:26:85:7a:39:83:96:c1:c7:5a:cc:78:
bc:05:54:4c:dc:47:aa:27:f3:2b:ea:17:d5:1c:92:99:77:92:
bb:c3:1b:81:c4:fe:6d:e0:be:2a:ed:e5:f2:4d:b0:24:61:28:
29:5e:5e:1a:b1:ed:ad:c5:ef:d1:18:e8:e0:37:fb:d3:4f:42:
cb:e8:33:a4:3d:37:98:57:74:f2:d4:30:4d:dd:e7:7d:46:25:
54:7c:af:9f:da:1d:a9:4a:ef:06:82:77:60:a1:a6:87:55:13:
79:36:6c:74:bd:5d:0b:4f:24:0b:d4:6a:17:92:45:ee:5b:1e:
6c:0d:9c:cd:f4:5b:36:53:9e:c4:b1:62:1e:db:82:4a:b1:6b:
76:bb:66:a0:79:a3:e1:22:87:23:1b:21:6c:92:8b:95:91:d2:
ad:53:05:8f:61:59:96:ee:ea:ed:ba:d5:43:f0:87:b7:93:41:
bf:e6:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:32 2025 by rpki-client