Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed025c57-3e0c-3587-8551-f2a91faa4dff.roa
File: ed025c57-3e0c-3587-8551-f2a91faa4dff.roa (raw, json)
Hash identifier: 3Yt/pOj94UzK6brdIB+CCMdT3iplwQKLobcGapX4jCA=
Subject key identifier: A4:98:C3:FF:50:29:55:76:24:91:AF:67:3F:90:82:B9:4B:31:C0:11
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D8DC0A1E71208C3E6DD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed025c57-3e0c-3587-8551-f2a91faa4dff.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.2.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:8d:c0:a1:e7:12:08:c3:e6:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6ca2a474-74f0-42cd-ab73-43583f27fbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:c0:0c:5c:53:49:12:cc:93:c1:61:c5:03:
81:86:ce:ba:40:6e:35:6e:f6:66:6d:8f:63:26:06:
94:60:1c:03:e2:5d:fd:c6:1c:4c:c6:b3:de:8a:13:
9f:31:e1:f4:fb:0b:39:31:58:3d:82:d4:13:32:a3:
5f:38:87:aa:02:9a:ae:de:8f:7e:02:53:5d:c6:bb:
af:6d:15:73:6b:50:8b:b2:4d:f7:97:d4:cf:96:45:
78:b4:f7:79:9a:ee:99:bd:67:39:ad:86:d5:65:90:
76:55:3c:d4:e3:67:59:b1:91:20:3f:3d:3e:e7:4a:
ac:4f:c3:53:2a:e4:c3:dd:2c:35:04:2d:76:b2:f8:
32:83:12:04:57:ea:b3:7a:64:89:2f:fb:5b:01:91:
88:91:57:b3:ff:49:84:52:a0:0f:44:2b:dc:32:b0:
1c:f8:c3:dd:99:8e:18:d8:4c:8a:7d:e1:d1:35:3e:
f8:86:e9:54:17:21:50:13:94:d7:bf:58:d5:ca:1d:
93:a3:65:0a:02:ed:59:23:84:71:42:90:fd:23:c5:
c1:21:6c:d9:08:98:c1:da:90:df:07:23:7b:50:6b:
53:2a:9d:ad:18:73:98:33:53:ff:12:20:23:60:49:
7b:23:12:67:48:1f:a0:a4:ae:3d:45:36:41:ef:3c:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:C3:FF:50:29:55:76:24:91:AF:67:3F:90:82:B9:4B:31:C0:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed025c57-3e0c-3587-8551-f2a91faa4dff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:de:89:40:c9:a3:af:86:e5:8e:b2:ba:2c:3a:7f:66:ac:e6:
c2:8a:2a:32:3a:56:64:ba:1b:6e:90:3c:9f:72:1f:34:c8:fd:
0b:96:7a:28:50:fe:95:5c:1a:7b:d5:bc:5c:31:1f:21:47:fd:
eb:06:2f:f1:42:74:5f:ba:3a:b9:d4:86:d1:09:1b:7b:d0:ca:
22:1f:78:db:d9:9b:3c:70:4f:f8:07:71:df:2f:a4:41:38:3d:
26:98:ac:4e:ab:9e:45:6a:16:c8:11:da:70:54:72:65:f1:4e:
85:1e:88:f7:65:5a:4b:d9:20:a2:75:af:66:0b:df:55:75:63:
97:d0:21:2b:0a:49:cd:01:e0:53:32:77:85:d4:bd:67:2b:0e:
ef:01:61:7a:d2:69:ea:f4:10:ca:4a:7c:76:89:33:91:0a:5e:
26:ef:d4:8a:11:5f:63:44:fb:34:53:bd:ce:78:c0:59:cc:ba:
ec:ee:3b:1e:11:8a:70:61:56:0f:a3:be:fb:10:d2:4d:76:3b:
8b:b7:d1:e0:24:57:18:98:4c:ff:a3:64:16:1c:79:64:7d:d9:
26:57:66:d4:98:8f:54:b5:40:74:03:bc:9c:f2:1a:28:08:ac:
b7:70:4c:90:78:af:7d:5f:23:50:e9:d5:90:ee:20:0c:a3:fc:
6b:52:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:21 2025 by rpki-client