Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff3d935e-182c-3ac3-b6d7-b59ac813a26a.roa
File: ff3d935e-182c-3ac3-b6d7-b59ac813a26a.roa (raw, json)
Hash identifier: xxqexdRrH7LhgXUPys49Z9qVLNiwz1hSaNwIMmxtMJw=
Subject key identifier: CF:DB:04:BD:35:FC:7B:C4:E0:C9:AE:DC:8E:24:B4:5E:4A:33:78:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C126670867E54B4BBCF5E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff3d935e-182c-3ac3-b6d7-b59ac813a26a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.12.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:66:70:86:7e:54:b4:bb:cf:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=00bdcd6e-a9cb-4c76-be60-3f3d35264541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:08:37:3e:4d:f4:c6:ea:e7:38:64:e0:e8:
af:03:f3:3d:88:5d:71:ea:03:30:c5:1e:21:0b:5d:
00:c9:a4:af:e3:fd:b7:18:33:8a:33:72:7b:9b:e8:
f3:97:db:b6:6d:eb:3c:be:48:86:69:3c:8e:a3:a9:
e0:e5:06:50:ef:60:2c:3f:2f:73:0b:0c:79:36:50:
1d:2d:44:bb:c2:44:75:48:81:4f:85:b7:19:c5:08:
49:62:d8:20:e1:a3:5c:1d:30:3c:01:9a:d6:e0:15:
66:1f:21:18:77:fa:e7:96:2c:75:34:db:18:12:41:
d1:06:d3:d7:20:44:62:9a:bc:1c:41:18:6b:46:7e:
7d:d9:16:cb:83:d9:cd:19:62:d7:81:0c:3d:95:4a:
8f:15:25:5a:2f:fa:20:89:4c:f8:98:da:fd:aa:96:
0d:21:68:01:f1:6e:07:07:7e:eb:e9:e4:7c:6f:04:
4b:cf:04:f3:85:b3:af:1f:1d:97:5f:f3:a3:4d:2d:
c4:c9:c4:32:73:d1:8f:91:be:2f:bd:57:b1:fb:66:
17:2f:61:54:8e:32:41:0a:c9:b0:71:23:29:cc:db:
92:a9:c3:71:79:58:16:af:ca:c7:db:89:d3:6d:c9:
d6:cd:0e:14:c2:c4:d6:a9:5a:f2:45:84:9e:ad:63:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:04:BD:35:FC:7B:C4:E0:C9:AE:DC:8E:24:B4:5E:4A:33:78:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff3d935e-182c-3ac3-b6d7-b59ac813a26a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:5a:43:fe:69:ef:f8:fa:91:fa:a2:5e:a3:2a:d9:e7:0c:b8:
ab:a7:d5:c3:de:3a:19:74:dc:a3:03:9d:d9:67:66:ad:08:08:
68:ce:ab:8f:92:f7:8c:14:5d:d4:2a:6b:65:5d:94:f0:20:cb:
80:f0:56:45:7e:62:d1:9e:c1:89:58:3d:b6:8b:0c:48:d6:21:
7f:1f:69:c0:70:02:8f:fe:c3:c5:63:85:06:1b:21:73:6e:3b:
f2:71:95:8c:f8:1c:31:0e:13:12:57:ec:f1:19:13:df:5f:81:
58:52:10:1e:de:79:16:81:9d:0c:5d:5b:18:1c:e2:88:9d:aa:
b8:c9:f8:7d:e9:b9:46:60:a6:2c:98:82:b6:f5:75:c7:3d:d9:
db:7e:0d:55:8e:55:c6:85:13:60:b6:63:22:2b:76:69:ef:c2:
17:3a:72:9e:6a:49:c9:bd:36:b4:a0:c7:3e:ea:e3:0b:7e:91:
77:4f:ff:e7:d5:43:f4:37:93:8e:78:74:5b:50:7a:ca:91:5c:
2d:51:16:a4:07:2a:80:d7:25:fa:0a:11:a7:fb:b3:4f:ac:eb:
26:44:27:f3:81:9e:a6:ee:b1:98:e4:e5:eb:ff:01:68:6d:95:
90:b8:86:4b:a9:76:1d:57:ea:24:86:cb:1b:21:31:e2:97:c6:
ad:15:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:51 2025 by rpki-client