Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c78628-be53-3162-80d5-b5c1ea8334ec.roa
File: e6c78628-be53-3162-80d5-b5c1ea8334ec.roa (raw, json)
Hash identifier: GDVAB+9ezEfV00FIdJzsMF3V28UsraIfDA7fPIgxIm8=
Subject key identifier: 68:3A:AE:87:9A:C5:40:89:31:A0:37:03:40:D0:E9:DC:8E:12:79:CA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10C265E575FFF253720900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c78628-be53-3162-80d5-b5c1ea8334ec.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:c2:65:e5:75:ff:f2:53:72:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=50a02e05-63d6-4063-af2e-4e2d1824a70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:64:e3:d6:4e:6f:c5:97:f1:a6:3f:f9:11:
bc:23:07:f6:12:ed:3e:2a:3e:97:1d:95:56:f7:6b:
e7:7e:3c:c6:15:fb:ac:a8:bf:3c:0b:6d:d4:3c:cf:
0b:9d:dc:91:fc:cc:ee:35:72:a2:0d:5e:bb:5d:09:
09:d8:fa:f7:a4:b7:61:f0:2b:1c:fb:1a:7e:21:c7:
6d:bd:68:ab:e2:26:06:a8:ec:89:06:95:28:4d:59:
8f:d3:72:61:8e:0a:61:11:ae:18:28:0a:73:95:da:
dd:d4:f3:78:4c:be:22:de:77:52:a0:94:b5:cd:e5:
a5:5d:62:d4:6a:71:d6:2f:ee:78:a4:6e:89:5c:56:
f5:e0:c1:1b:e3:44:19:a1:46:08:b4:67:e3:22:d5:
bc:fd:18:f6:32:23:e9:cf:86:ee:4b:90:92:f5:16:
e1:aa:27:48:8b:2c:ef:f8:34:0d:2f:39:a1:83:ce:
16:66:2e:14:cd:11:08:ed:80:27:8f:66:88:7e:b5:
a8:f0:54:a2:e0:18:96:2a:18:86:f0:b5:07:6d:e3:
24:47:91:ca:cb:78:bc:61:26:f3:c5:92:46:a3:52:
be:1a:bf:ea:6a:73:af:e2:c5:bc:e2:58:65:22:be:
70:1b:c4:cc:f2:f3:1c:85:44:4a:db:11:23:03:13:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3A:AE:87:9A:C5:40:89:31:A0:37:03:40:D0:E9:DC:8E:12:79:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c78628-be53-3162-80d5-b5c1ea8334ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:c5:d1:1b:c4:a3:fa:c2:b8:9e:1f:be:59:6f:b5:49:86:ee:
5b:d0:24:d2:e2:e8:e9:0f:9a:b5:70:c1:21:83:14:34:34:5f:
2b:bf:b2:e3:fd:f6:ba:0b:65:5a:17:5e:7e:02:2f:33:29:3d:
56:20:82:d4:c7:63:16:e5:62:49:43:64:88:f5:f6:d6:6f:88:
67:18:d1:66:39:49:e6:93:4b:85:ce:78:4b:64:d7:d5:78:1c:
43:56:ac:ee:dc:60:7b:3a:f3:ac:82:b6:a5:3a:f8:dd:e0:9a:
83:41:fa:88:0a:83:55:c1:f0:f3:90:39:50:3d:d5:88:dc:b9:
52:9e:cc:cb:98:b2:fb:08:ef:38:28:ce:49:f0:1e:f3:17:14:
df:26:b0:1d:0b:8d:1a:de:72:72:88:5a:b4:67:fc:17:ed:2b:
a9:cb:ba:ec:8b:71:7c:e4:43:d2:3d:59:1c:30:92:96:fc:4d:
38:12:fd:6d:93:47:b6:c9:06:be:ed:2a:39:7e:3b:6a:d9:fc:
13:8e:f6:1a:ce:a2:ef:3f:37:71:bd:48:cf:83:b3:2d:f4:83:
e7:09:8d:ea:b1:6a:42:f0:9f:81:bf:1b:c2:ac:7a:42:a8:b9:
ba:bf:6e:8a:f5:58:8d:9d:90:f4:14:98:fd:c5:bf:d9:df:06:
98:1c:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:07 2025 by rpki-client