Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e363ec70-77f0-36ba-a2e5-8cd59594220a.roa
File: e363ec70-77f0-36ba-a2e5-8cd59594220a.roa (raw, json)
Hash identifier: d72KvQmhUS7wXwEOqCJZXtfOK10rgZcTizC+OjJtXfU=
Subject key identifier: 84:DA:BF:95:4B:A8:D7:7B:62:E6:07:0B:58:6F:11:E2:E6:D1:6A:E1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AC4CC646EA5D2ED496080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e363ec70-77f0-36ba-a2e5-8cd59594220a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.218.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:c4:cc:64:6e:a5:d2:ed:49:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=78fcdb6b-07fb-4a58-a880-7bdd27f27221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:20:cb:16:79:e7:29:36:bc:c9:e0:4a:84:
50:48:79:ff:59:df:4b:c3:ae:29:60:04:39:a7:8f:
33:cd:6e:43:d0:66:89:14:15:29:dd:1a:e1:57:b4:
22:1e:ea:02:f5:a5:2b:36:d9:8e:c6:93:12:6c:28:
3d:f1:8d:bc:d6:9a:e6:82:e2:cd:c0:05:7f:22:e2:
e1:54:e4:05:6b:96:6c:b4:5c:94:5b:fb:6c:bc:8a:
28:56:31:6c:cb:a9:c8:0b:25:7d:17:2c:1a:3f:6f:
72:99:71:23:72:2d:29:2a:81:ac:e3:eb:fd:97:12:
4e:15:93:3b:7c:81:f7:2c:21:f0:b5:78:63:ed:26:
2e:44:09:a7:12:82:39:d8:fa:25:60:f4:39:41:fe:
c5:19:b9:40:7c:30:78:dc:9c:15:63:1f:32:0d:67:
0d:b3:97:6c:de:61:47:87:85:6a:59:6e:42:a7:0a:
35:c9:cf:23:6c:1c:22:f8:31:cd:0e:3c:ba:7d:73:
2a:0f:d7:60:ae:15:5f:a0:f9:ae:e1:81:51:8e:94:
35:2d:99:13:68:de:22:72:00:66:53:0f:81:c0:f0:
78:da:23:ba:af:b3:06:c0:93:42:25:f9:2f:98:0a:
36:45:de:ae:64:83:8f:34:74:f0:96:a8:c3:28:d9:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DA:BF:95:4B:A8:D7:7B:62:E6:07:0B:58:6F:11:E2:E6:D1:6A:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e363ec70-77f0-36ba-a2e5-8cd59594220a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.218.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:bc:40:f9:98:21:99:0e:75:4e:60:42:73:a6:64:e0:07:83:
dd:19:1c:39:fe:38:d7:c5:b4:91:0b:2a:d4:38:b8:20:87:c6:
0d:eb:a8:a9:7b:c2:e6:0f:23:e8:4e:7c:8e:ad:f5:5d:f6:a0:
e2:d2:e8:e7:af:9b:eb:e7:17:57:5c:81:34:6b:71:df:59:50:
31:ac:fe:c9:8a:12:a2:3b:4b:4a:50:60:e3:ef:bf:b3:20:45:
c9:50:d8:05:7f:0e:36:2b:c8:e3:a0:a9:63:69:05:2b:f2:6f:
69:76:19:05:79:bf:83:74:69:16:e0:86:35:06:62:2b:b8:4c:
68:d6:74:0e:60:59:f9:f5:ef:68:3a:a2:ab:b5:0a:ff:a1:42:
bb:29:97:4a:91:4e:2d:c2:f2:2e:3d:c4:2f:fd:75:68:e3:1d:
34:f5:7b:b6:fa:5f:2a:ae:80:4c:3b:9e:ba:03:b6:d4:d3:e6:
48:4c:f3:18:a4:a4:36:68:b8:21:11:41:65:6b:e1:3b:86:eb:
12:85:ba:04:35:c6:32:df:e8:7a:a2:2f:7f:0d:f2:0f:65:7d:
70:4b:36:1e:33:47:4f:a0:e8:9c:30:23:71:9a:8a:91:7a:9a:
32:5a:0f:7d:65:c2:db:b2:a9:42:02:91:22:ea:dc:1c:44:9a:
b2:63:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:56 2025 by rpki-client