Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f52c02fd-54cc-39b6-93a1-8e5cac04773c.roa
File: f52c02fd-54cc-39b6-93a1-8e5cac04773c.roa (raw, json)
Hash identifier: WS6Htg37JF8n0b0I7urleO9eWBOD+muiuqGuwRt8zo0=
Subject key identifier: E3:EF:19:DC:5F:9A:1F:D5:54:4A:63:37:DA:57:18:05:AD:E2:95:70
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D8DCD12AF953C0A578AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f52c02fd-54cc-39b6-93a1-8e5cac04773c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.2.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:8d:cd:12:af:95:3c:0a:57:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3fafc2aa-4202-423e-9e37-b7612b70421c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:e1:76:3c:03:f3:93:e6:31:9a:87:09:12:
db:4d:f1:b6:97:bb:b2:4c:86:43:58:71:81:76:8d:
25:6f:0d:ef:04:d6:68:97:f6:2b:9b:9f:7b:8b:9d:
b2:bc:1b:4a:dd:4b:39:0f:5a:db:f6:1b:c7:ef:f3:
c1:31:61:72:e1:20:17:a6:94:f9:c9:a7:bf:64:b9:
26:ad:93:54:e3:92:c9:bb:50:3b:60:28:db:39:cd:
d1:64:3d:b3:c7:ce:22:54:f3:7e:29:1b:66:e8:2e:
f0:a9:d5:23:b5:69:27:75:36:56:8a:c6:b3:52:0e:
8f:47:77:5c:1e:3e:fa:53:c7:d6:10:56:ee:13:f1:
6e:44:2e:e4:58:30:a0:25:46:e1:84:8f:32:10:51:
5b:79:7c:4d:cb:c0:a1:70:a2:a0:e5:53:83:d2:8d:
e1:0b:d8:d8:e6:7b:50:b3:0c:3d:c4:93:cf:62:e7:
73:48:ea:63:da:45:52:de:20:3b:3d:b5:ab:6c:42:
71:82:88:4c:b3:21:48:e8:df:f0:15:8d:f5:ae:3b:
88:76:d0:65:54:48:f3:ac:0d:d9:12:5b:70:77:bb:
cf:47:d6:14:e7:8e:6e:e6:1a:5f:85:68:db:c9:b2:
95:e6:d1:49:ce:98:a1:b9:93:6c:e4:ec:92:c7:b3:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EF:19:DC:5F:9A:1F:D5:54:4A:63:37:DA:57:18:05:AD:E2:95:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f52c02fd-54cc-39b6-93a1-8e5cac04773c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:bf:b0:5b:b8:be:32:67:d8:fd:fe:34:3f:29:ea:f6:27:74:
d2:e7:ad:c3:8b:44:a0:09:f0:43:15:83:91:73:1e:27:e4:51:
da:d7:4f:a6:0e:65:e8:1d:9c:27:1e:62:f2:72:39:de:78:8e:
3a:32:91:6b:e7:d8:49:20:0f:0c:2a:10:ee:a9:72:b2:1a:08:
a0:de:e2:66:f2:24:75:0f:ed:78:90:b0:c7:9f:c6:33:c4:40:
4f:15:c0:1e:7a:9b:9e:75:80:ca:0e:14:3a:39:c7:a7:43:46:
03:49:01:a8:e5:3a:f7:b2:48:e7:b2:41:8d:07:0d:9d:8a:15:
8e:84:d6:27:4c:1f:ac:4a:af:dd:d1:15:16:25:a1:c6:06:10:
c3:ec:31:95:7b:59:4c:14:89:6c:c6:60:81:b2:c9:af:95:18:
8a:94:91:48:c9:04:70:06:7a:94:f2:70:60:7c:ef:5b:7c:5d:
48:b6:26:a1:35:6f:e5:aa:ce:00:bc:d3:0f:2c:23:11:fe:ab:
b6:b5:32:d9:c9:61:33:d6:6c:6b:8d:5a:f8:b3:41:be:2a:bd:
5c:ed:9a:53:51:45:2b:9e:c9:d5:1c:a9:ef:9c:bb:6f:ea:1f:
14:01:0c:9a:8b:7f:3e:b6:33:b3:49:ba:4f:b1:05:f7:2d:47:
1e:d1:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:28 2025 by rpki-client