Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de4bb376-fe3b-32b3-8790-afecf05eb8d3.roa
File: de4bb376-fe3b-32b3-8790-afecf05eb8d3.roa (raw, json)
Hash identifier: xhjsp2WvSNhHRD2fdP0dD7f85v8xx0vXcO7/GLCd8v4=
Subject key identifier: 11:38:18:69:B2:30:30:3E:E4:DF:D6:B5:4A:36:28:AE:45:47:06:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AD006994F6CA172AC2FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de4bb376-fe3b-32b3-8790-afecf05eb8d3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.91.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:d0:06:99:4f:6c:a1:72:ac:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=14ff353c-f8a4-4af6-a6ae-9de50859c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:98:4f:21:75:f9:fc:bd:1a:51:d6:23:76:
95:ab:a2:e5:8c:84:62:42:3c:7f:ee:f0:6b:b0:3a:
05:77:b2:d5:ee:0c:00:98:27:c3:01:12:57:44:cf:
0f:2f:b5:c4:53:e0:35:2b:8d:7e:c5:38:10:56:36:
18:50:36:61:61:88:dd:39:11:2d:b9:77:0b:46:b4:
86:8a:e6:c4:a6:50:cb:e5:1a:00:46:04:0f:4e:29:
a6:9b:dc:63:41:9c:87:7c:09:76:97:29:e6:e8:d9:
a3:c2:6f:c4:ed:f5:09:bd:e2:8b:97:f8:c6:d2:44:
2f:38:53:1f:4f:d5:82:b5:71:7d:29:67:d5:8e:f4:
87:c4:cc:59:f6:71:b3:28:7f:7f:a3:f8:01:ed:85:
35:1e:89:c5:c6:e8:6d:d2:ed:95:80:ea:e7:b6:58:
bb:22:19:ca:fd:9e:ee:f3:0b:f6:10:e9:a1:a3:ff:
0b:83:e8:fb:c6:31:3b:ff:b2:e3:dd:c9:e8:ff:be:
3c:84:88:03:37:8f:63:ca:d5:9f:82:e6:c1:42:1f:
a4:1f:95:35:20:05:34:f4:db:0a:4c:b4:74:b0:19:
93:56:90:04:db:5e:c0:27:c2:7a:0a:6b:4f:40:98:
51:7f:07:38:3a:1c:34:0e:ce:93:2a:a6:ae:17:a4:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:18:69:B2:30:30:3E:E4:DF:D6:B5:4A:36:28:AE:45:47:06:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de4bb376-fe3b-32b3-8790-afecf05eb8d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:f8:2e:85:86:db:7b:5e:ff:d5:b9:6e:46:7a:91:38:34:2a:
bf:44:79:10:fd:51:e1:7a:aa:c4:8a:8d:ca:9f:09:93:c9:5e:
9b:84:69:2c:89:ac:99:01:22:5b:7d:f0:4d:2d:ad:0b:e6:73:
ab:97:79:61:47:ab:a3:72:d6:bf:88:71:8f:5a:44:a2:16:6f:
02:cf:5f:f4:9c:8e:21:f0:32:a4:58:c9:71:c5:85:48:1b:d8:
50:1c:d6:cd:97:7f:37:4d:76:26:12:df:2e:11:07:32:d4:3d:
0e:0f:78:38:e4:ba:2c:5e:4a:5a:1d:a3:83:70:de:5d:8c:17:
c7:7c:11:4a:18:51:f6:c7:fe:ad:2c:bf:0d:93:08:08:c0:4d:
fe:2c:18:0e:49:43:5a:af:fd:ff:b6:fa:dc:d6:80:bb:b1:9a:
f1:66:e8:bf:5e:00:48:ab:2d:5a:91:0e:fe:9f:f7:fc:87:78:
70:c0:2e:79:bf:45:90:0a:a4:7d:5b:44:5b:4e:3d:22:69:64:
66:6b:d0:a5:ca:31:b3:89:31:ba:6f:b8:b1:b1:d0:05:cf:6a:
be:67:86:65:0d:e5:a9:c5:44:8e:97:ed:f5:6d:55:2a:6b:e2:
46:e3:59:a6:10:90:1c:be:d8:cb:a4:d7:86:1f:01:19:97:60:
67:bb:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:27 2025 by rpki-client