Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f10686-b410-3974-a42c-913669d9a642.roa
File: e4f10686-b410-3974-a42c-913669d9a642.roa (raw, json)
Hash identifier: ZEduazzWUzRJI4+FFZgpvmc582oe9VXIOHC2cfrr2r8=
Subject key identifier: F9:43:8E:AE:14:2B:1E:92:FD:84:80:06:C0:A6:F4:70:3F:BB:88:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10C7701C7D52D2523B9700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f10686-b410-3974-a42c-913669d9a642.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.13.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:c7:70:1c:7d:52:d2:52:3b:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=883f0723-7696-46f7-a587-b092cbefd63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:2b:a9:96:bc:3a:ec:f4:b2:b4:a0:24:b3:
3a:4c:28:1f:9b:33:8b:60:32:06:ce:9b:bf:22:dd:
2b:b8:39:f6:b0:66:5d:92:2e:e3:e2:77:9c:5d:63:
a7:ca:0c:9e:76:25:43:dd:82:67:08:67:75:be:c6:
dc:94:8a:d7:ca:90:09:79:36:49:0e:b0:b9:7c:1c:
0e:c4:16:2d:55:44:ad:51:6a:70:9d:fe:ca:19:3f:
c5:9f:2c:3c:2f:21:9e:9d:cf:75:b6:21:df:84:7c:
1f:a3:25:0a:b4:9b:04:79:dc:c9:4f:80:9f:6f:97:
4e:00:1b:8d:18:9a:a2:49:05:bc:4d:0e:80:25:50:
51:64:25:dd:e4:a8:cb:e8:7b:51:bb:31:3a:a9:12:
9d:f3:4d:aa:f1:b4:e5:ad:2f:a8:84:74:6a:85:4f:
58:1e:23:e7:40:96:7e:48:40:23:e6:06:36:9f:b6:
fd:95:ce:38:ca:26:5c:e8:fd:78:b0:f4:2f:ac:2f:
be:ca:b1:38:cf:3e:bb:7d:8e:00:e8:32:8b:09:87:
bc:47:ea:98:64:99:fc:5a:44:92:e2:ea:42:97:06:
1b:0b:39:63:c3:8f:d6:51:d3:5b:c8:b5:34:60:ea:
5d:e6:85:55:dc:bb:8f:56:f7:a4:59:4f:48:18:38:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:43:8E:AE:14:2B:1E:92:FD:84:80:06:C0:A6:F4:70:3F:BB:88:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f10686-b410-3974-a42c-913669d9a642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.13.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:3f:d6:3e:c9:3e:12:ce:f4:22:83:6f:86:75:c9:ed:ac:48:
5b:3f:21:c2:2d:e6:56:e2:d8:b3:78:49:70:0d:6d:bf:cb:1c:
85:cd:0e:97:50:c0:93:36:f1:a3:33:85:38:d4:44:05:3f:fc:
82:6f:78:9a:10:91:63:ba:7a:cc:bd:7e:ef:85:59:30:90:4f:
a7:4a:63:e7:0f:db:f3:a2:72:de:d9:c7:3e:bf:bb:37:0b:5e:
91:af:5c:31:d6:93:6c:b0:1b:1b:f2:a1:2a:db:72:53:6b:96:
f4:71:89:32:11:99:bf:1d:5f:97:9e:61:91:b3:4b:be:bf:d2:
8f:78:dd:3e:d6:41:c7:8c:c1:28:67:ab:8c:3a:19:e6:cf:a0:
1e:80:4f:bc:4e:8b:80:2e:0e:50:e9:86:64:d0:e2:7a:91:57:
2a:2d:b9:f5:d1:91:56:90:a1:d5:46:e9:ed:2c:2d:d4:c1:9c:
4c:06:c4:46:73:d0:d7:16:98:3a:98:87:9c:81:7b:ad:f3:c0:
a2:8c:63:cb:a7:e0:2b:09:9d:67:96:80:de:95:51:15:62:1e:
b9:f5:f7:aa:b7:ad:1f:c4:0f:d3:64:20:be:13:a3:7c:b1:82:
97:db:db:d9:79:f8:a0:29:19:64:1a:7e:45:c8:1a:16:79:fe:
61:7a:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:22 2025 by rpki-client