Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa
File: 470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa (raw, json)
Hash identifier: Ee0J/EPoCth39g2T4EfvL9ELdWopI2OUXWIlk6XXU1g=
Subject key identifier: 19:5A:C4:10:E4:A8:2C:17:AE:39:4F:CB:E7:8E:77:45:0E:75:06:62
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905DF501DAC474208C7700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.124.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5d:f5:01:da:c4:74:20:8c:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=f0f2a81f-7492-4483-833c-c1d4bfea519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:a3:05:64:8d:23:48:3f:73:9e:46:4d:41:
1c:a3:c4:fc:c0:1d:98:55:e6:6f:a7:52:6e:aa:82:
fa:93:a9:98:fa:67:1a:10:59:8a:a5:9e:68:19:52:
0c:81:92:28:bb:b2:6e:ce:c3:10:92:9a:b9:c0:b5:
75:a0:0c:38:a6:f6:51:a3:35:29:7a:35:c4:f5:41:
93:b1:47:c5:77:7a:e2:59:b5:a3:44:6d:3f:23:a7:
71:4a:61:65:5a:30:ed:32:af:24:62:56:85:6d:8c:
7a:97:15:b9:4c:fe:52:bc:85:94:5c:ea:ae:8c:c4:
58:96:fa:e7:00:3f:96:58:9c:c4:3c:e0:d5:4a:05:
d6:96:a6:62:07:d4:b2:e6:05:df:79:99:34:f1:0f:
13:46:a8:af:e0:7b:6f:fc:7c:ed:01:fc:d9:30:21:
af:5d:47:4f:2f:df:c8:a2:b7:a1:b7:da:42:ba:f1:
45:a6:d8:03:17:4b:89:23:e5:96:a0:ca:71:98:c1:
64:c3:f3:5b:7f:d8:48:8d:32:38:df:00:22:00:3c:
80:50:04:7e:fc:d6:9a:45:cc:3f:12:ac:3e:c1:c0:
83:5a:e5:85:5d:a5:f8:68:ab:af:f3:8b:5c:33:71:
bf:21:9c:2c:c7:30:b7:c4:c2:df:f1:49:1b:a0:ce:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5A:C4:10:E4:A8:2C:17:AE:39:4F:CB:E7:8E:77:45:0E:75:06:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/470c18cb-66bc-3cbc-9ac3-568ab42bf549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:00:ab:90:7a:1c:a3:41:04:68:3c:73:52:1d:c6:cd:de:2d:
3e:40:aa:c9:40:a1:19:d2:f1:54:b6:46:03:67:e9:b1:5b:32:
80:d1:cd:ac:38:fe:6e:20:11:7f:10:bf:11:5c:35:44:7a:e8:
1b:1b:fc:33:5b:b7:1b:d8:b0:68:0c:10:df:ce:73:e5:24:db:
94:03:1b:8c:27:0e:95:dc:47:70:4d:70:d1:cc:1f:eb:0d:09:
29:2f:fc:39:0a:06:f0:1b:21:f0:55:59:fc:73:18:78:f5:a4:
c6:cc:46:73:26:74:dd:a4:bb:d4:2d:99:73:09:f5:fe:42:f0:
2c:76:7f:6b:cc:3a:6c:1d:3a:6e:eb:c5:bb:b8:d5:80:89:9d:
6a:77:79:5d:bb:b8:2f:cc:35:98:4a:f6:f0:70:0e:74:23:65:
6f:a6:6a:ad:d4:36:64:d4:80:3d:c1:88:19:48:78:c6:e2:17:
37:22:5c:7f:7c:14:52:d4:0a:0e:5a:af:d4:e6:dd:e1:1e:e2:
64:f3:92:c1:88:67:1d:4d:cc:f3:0d:c3:bb:06:f9:0e:85:93:
2c:8c:cf:bc:85:7b:c5:f9:61:7f:d5:45:48:91:ec:ed:e8:97:
64:83:18:7d:44:47:18:a6:0b:bf:3c:e7:f0:e2:39:9c:82:be:
29:75:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:14:01 2025 by rpki-client