Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c856f3-173c-3045-af07-b32fa72ae363.roa
File: e3c856f3-173c-3045-af07-b32fa72ae363.roa (raw, json)
Hash identifier: nEZGI3poxK/JtC46QbHcKXEjkNMrvRHNDXfsst1KS6I=
Subject key identifier: A9:C7:44:D9:8E:31:3D:1F:A9:02:F0:67:7D:56:55:DF:78:A9:22:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CD40E954DF8AB6318D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c856f3-173c-3045-af07-b32fa72ae363.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.2.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:cd:40:e9:54:df:8a:b6:31:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8f28ae21-c3d0-4bb6-9ad2-79b7b32dcad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:c5:0c:ed:8b:0c:ec:61:40:11:a4:be:b9:
44:e5:ff:6f:66:e8:50:26:31:ed:e8:6c:9f:64:99:
bb:b8:bf:74:9e:eb:d2:dd:e7:13:a2:8c:4f:ce:59:
43:a8:ac:3f:fa:8c:ae:5d:95:c7:d0:ba:8f:d2:fc:
2d:a0:3a:34:e2:a6:b7:4f:69:4b:99:01:71:56:9b:
e1:dc:38:14:e6:c7:c3:b5:cb:60:58:61:4f:4c:48:
4b:cd:59:87:92:94:13:01:bd:19:80:dc:40:8c:ff:
b1:c4:43:7d:12:3f:54:1b:b4:7f:8b:ba:cf:77:de:
8e:04:20:0f:66:82:ba:2d:1c:a9:8e:02:82:df:f3:
a3:f7:9a:21:b8:7e:ed:88:42:aa:58:cb:7e:91:7a:
26:18:17:bf:00:0b:78:ed:5c:07:8e:00:0c:56:91:
07:c5:77:2e:ae:ab:b4:be:9e:2c:d1:a6:c5:df:a1:
91:8b:6b:ec:c0:c4:96:56:0a:0e:43:1c:46:64:cf:
1c:84:24:8c:89:d2:de:a3:e9:65:f2:1b:1d:ab:ff:
70:38:8b:d1:dd:93:ef:9a:5b:fb:3d:33:54:3e:fc:
ac:06:25:40:8d:1a:65:24:0c:c3:70:40:ad:05:79:
07:07:68:8e:e7:23:58:b0:61:0f:09:43:cc:22:ee:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:44:D9:8E:31:3D:1F:A9:02:F0:67:7D:56:55:DF:78:A9:22:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c856f3-173c-3045-af07-b32fa72ae363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:7e:29:73:fa:73:ba:43:6a:45:d2:2a:6b:50:35:90:94:50:
3a:4b:fa:bb:5b:74:87:41:65:26:0b:36:40:43:16:76:01:3f:
3c:b0:7d:97:25:59:38:76:8c:c4:30:a3:6b:32:3d:f0:28:4d:
fb:4b:08:6d:0e:bf:54:0e:12:81:16:e9:b1:89:04:98:81:1f:
60:c7:af:2d:48:6c:00:c0:b3:d8:c0:b0:ae:e3:46:36:25:1e:
90:c9:a6:30:d8:63:29:5c:50:84:8b:14:b5:e7:db:00:09:d7:
eb:27:2f:b1:53:db:4b:cf:85:f6:66:1c:24:29:d8:03:3e:69:
b2:62:f4:ed:48:78:32:55:28:85:7d:8c:86:36:b6:ff:c8:e5:
f7:f6:5d:91:c2:97:aa:ab:b3:f7:6f:b7:f4:74:1a:5a:d5:91:
4b:43:b2:92:31:fb:bc:7b:c5:58:68:5d:34:bb:13:4b:2a:90:
bd:7e:f9:9e:da:ff:06:61:26:4a:cf:1e:6b:1b:4d:c9:55:2b:
ea:32:83:9f:32:fb:f1:29:95:ed:39:1b:7c:28:b7:e4:14:a3:
62:91:64:a9:45:11:34:06:3a:97:d5:80:dc:97:36:28:9e:83:
a4:27:6c:2d:28:90:79:49:e7:dc:8a:39:98:3d:20:04:c9:a0:
47:5c:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:00 2025 by rpki-client