Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce071d2-0dd9-3c5f-a79e-81e5aba1e557.roa
File: dce071d2-0dd9-3c5f-a79e-81e5aba1e557.roa (raw, json)
Hash identifier: pr4tGchIZ7CZTuvw/cV2dNGae7SXr+b0Gu0sxJCDWnA=
Subject key identifier: 27:B3:EB:8C:4D:1D:7E:03:47:42:B4:D4:16:F5:FA:AC:36:90:6E:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CE99B61A2DDD83DDEA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce071d2-0dd9-3c5f-a79e-81e5aba1e557.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.11.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ce:99:b6:1a:2d:dd:83:dd:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7bb79fda-3583-4f3a-a00f-fd3dec21f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:22:99:1a:cc:cc:eb:e4:c6:0e:27:cd:31:
fd:43:f8:8f:29:4a:c5:0a:67:6c:68:f6:fb:47:a0:
f2:c9:ee:a8:6b:a2:ce:f5:62:64:d9:18:28:c9:1b:
93:fe:bd:fd:06:29:71:36:7c:18:29:3b:a1:5c:a2:
bf:84:1a:48:41:17:04:56:c2:b1:93:98:8b:43:8d:
56:c9:78:e1:55:6c:88:ab:7b:61:b1:c5:c6:da:d1:
22:1f:5a:b3:4a:89:3f:5c:15:b6:a9:79:05:54:03:
d4:ff:99:3b:17:f1:49:f0:f1:15:2b:ef:40:2a:52:
94:8b:28:0e:8b:9f:53:2e:09:70:49:ea:64:68:5f:
5c:00:0c:f0:b2:c3:cb:6c:61:f1:95:68:28:a1:92:
85:0f:75:a0:4c:36:3a:ab:52:46:af:67:9b:fe:47:
d6:60:62:52:6b:76:54:0c:13:bd:4a:49:b8:23:ce:
18:58:d6:1f:25:a4:84:ae:55:c6:60:4c:a1:d6:7f:
92:31:2c:87:cb:47:55:9b:67:d6:3d:ea:2c:8a:4c:
fe:ca:af:2f:e9:e6:00:b8:72:68:69:a4:b7:55:c1:
d5:ea:f6:f4:ce:d5:c1:84:f0:97:89:23:ea:3f:ab:
e8:a6:4b:5c:db:c8:60:26:78:bc:db:8a:2b:ba:ae:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:EB:8C:4D:1D:7E:03:47:42:B4:D4:16:F5:FA:AC:36:90:6E:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce071d2-0dd9-3c5f-a79e-81e5aba1e557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:f1:0d:c2:30:c9:4f:dc:36:7e:c8:c1:ae:b5:45:e1:86:e9:
67:ed:6b:91:f7:02:dc:3f:fd:6d:4f:5b:41:a2:21:70:57:5a:
9e:5c:16:cd:d8:56:bf:78:42:1e:bc:55:71:53:90:d4:b2:97:
87:84:4a:f3:1d:07:a1:30:43:75:29:74:49:c5:4b:bb:67:5b:
16:5e:b0:6d:03:ba:35:31:32:7c:40:12:7e:8e:02:b9:9a:37:
82:29:4f:1d:04:2f:ef:e7:27:a4:d7:01:62:9c:83:8e:ed:86:
00:eb:86:56:a5:a9:ba:6c:7e:d3:4e:c8:3e:91:e4:b9:66:c7:
c5:4f:26:38:7d:49:3d:ae:9c:28:c3:bb:d4:2b:ca:84:ee:1f:
4e:f3:8c:65:48:20:9a:e9:59:04:98:76:74:ad:9a:76:b9:ab:
48:cd:da:72:7d:5a:2c:5b:a9:78:47:2a:c3:43:bb:6b:de:90:
2a:27:39:87:f9:db:14:b8:b6:bb:fa:02:56:9a:92:1c:ae:85:
1b:81:c5:4d:e7:60:0d:92:89:3b:25:7c:5f:3e:6b:69:19:ea:
be:81:d0:fe:3b:89:8a:49:d6:65:ac:c0:e7:06:bc:b1:c0:80:
61:80:cc:c4:e8:7f:00:56:a5:62:53:1c:be:2d:bd:bd:24:8e:
74:54:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:07 2025 by rpki-client