Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de857441-bc20-3da7-b4cd-0a71d8228be5.roa
File: de857441-bc20-3da7-b4cd-0a71d8228be5.roa (raw, json)
Hash identifier: lWegfEUs3IYvsj9/ontWhodSvLZ1SaDjg9MKkxgyN7s=
Subject key identifier: 38:A0:05:7A:34:6C:23:E0:41:66:A2:A5:AC:39:DF:DB:5C:13:4F:9D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C103A21B02C616AA7DA4880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de857441-bc20-3da7-b4cd-0a71d8228be5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.10.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:3a:21:b0:2c:61:6a:a7:da:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=936deeb0-1c37-4a0f-b573-aa9ba1165a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:b8:53:99:3a:70:f2:d7:69:c3:41:85:2f:
66:3f:87:4b:76:b3:50:07:90:34:98:8e:c0:57:44:
cf:f9:b0:af:0b:5c:a2:94:d4:47:5e:7b:a8:ea:ee:
21:14:38:64:d5:ae:f3:12:b5:2f:04:89:d6:02:33:
91:c4:a4:0b:ac:12:1d:89:39:e0:6b:2f:c3:7a:4a:
f9:52:62:fc:ce:07:56:2b:b8:86:99:c7:8f:d2:9c:
03:f2:cf:e4:4c:3b:61:20:d9:88:2d:56:57:c0:ed:
95:15:79:03:98:42:a5:3e:81:f0:d2:a5:ec:56:a9:
b8:9c:9f:bd:16:f2:b5:c0:de:b3:e2:00:3a:fd:fd:
5f:25:47:f3:bb:9e:0a:f6:19:40:b1:4a:8a:7a:5e:
c8:52:12:6d:ee:7b:38:24:72:b7:62:74:3a:0c:c6:
b5:8f:1f:21:80:31:59:da:38:bb:74:02:1b:cd:01:
78:be:28:57:8a:16:7c:d8:29:4c:60:a0:45:f3:7c:
23:5c:7a:e3:cb:cf:ff:fb:95:92:89:67:96:e5:03:
f1:08:ed:ec:e6:b5:a3:c5:47:46:f0:d8:c4:13:d5:
e0:c3:3e:f4:78:84:8e:25:25:34:70:ff:b9:8e:a5:
10:20:7d:43:08:a0:97:95:10:be:af:68:42:9c:69:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:05:7A:34:6C:23:E0:41:66:A2:A5:AC:39:DF:DB:5C:13:4F:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de857441-bc20-3da7-b4cd-0a71d8228be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.10.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f6:00:01:4f:4e:55:03:bd:7f:ec:f2:fd:c1:5e:35:c5:31:
2e:2d:bb:87:69:5f:ae:4e:cb:35:a3:3e:9e:51:cd:00:0b:17:
78:0b:10:d3:01:46:7e:35:c5:65:44:e4:f5:80:65:fe:9c:73:
96:b2:0e:bc:71:bb:41:6a:1e:14:36:5f:47:2f:38:e4:0a:ea:
0a:62:1b:06:dd:4b:5d:9f:80:b8:8b:1c:80:50:e4:57:02:43:
d9:bd:1f:7a:d3:85:9e:34:15:b0:9f:03:55:15:97:9f:ca:95:
73:1c:fa:dd:b7:0c:9d:85:05:e5:60:4e:06:86:5d:f1:84:18:
cf:7c:fb:c3:61:b7:c6:94:ec:3c:fd:31:9a:87:91:f2:6c:a2:
78:32:e9:0b:32:d3:a5:6d:97:3f:35:1d:53:2e:35:af:57:36:
8f:a2:e8:a1:28:7c:a4:cc:64:f7:ac:a4:c4:a7:cf:b0:3b:99:
7d:85:80:4f:35:28:cf:b5:64:f3:d7:5b:86:a2:f4:46:f0:cf:
66:92:1d:e8:a8:bb:e8:12:7a:ab:26:88:54:26:1f:75:d4:c5:
3e:a9:6d:3d:ce:5e:3a:55:5f:b2:53:79:9c:e6:61:18:a7:e1:
66:af:fc:ee:80:c0:ff:62:92:d8:1b:b1:80:79:5d:a3:aa:03:
5b:71:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:24 2025 by rpki-client