Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa
File: 4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa (raw, json)
Hash identifier: BXywiLXcCgEQGD0jUY7zUb2nDlOCpOSziB0zZEOzu5Y=
Subject key identifier: 50:7E:41:4A:57:4A:C6:50:41:8A:34:9E:67:C7:F1:43:C0:93:EA:51
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905E55818171C27A139800
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.124.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5e:55:81:81:71:c2:7a:13:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=726f9c62-caf3-4a07-a1f3-51dc88c99643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3c:30:5e:4f:a8:66:e6:b4:3e:57:7b:42:9a:
83:6d:28:99:6c:e1:a2:8e:5c:3c:cb:78:9b:01:1c:
df:ec:4e:50:94:67:65:b8:0f:be:75:0f:c0:5f:49:
2a:e4:98:0c:c4:53:7e:be:a8:c4:92:61:6e:69:33:
d9:f9:59:de:25:5f:b7:be:8b:60:45:80:4a:e5:0f:
81:34:6a:4c:01:02:77:ec:db:ea:f1:3e:40:23:d6:
6a:58:83:2b:fd:53:58:4d:94:52:12:94:c1:f6:f6:
d9:52:24:d6:b8:8d:57:10:49:29:b6:dd:d4:a4:4f:
32:5e:27:05:5e:64:6c:91:8f:95:4e:04:22:3f:19:
7a:3b:92:32:58:b1:2f:87:48:cc:90:4f:fb:e8:38:
3e:12:a9:e0:64:48:83:2d:6e:cb:87:fb:e0:58:1f:
97:ac:e9:50:3a:7d:60:3d:30:4b:71:79:d8:87:9a:
0d:fd:27:57:56:b5:f5:23:90:43:df:1f:d3:74:f0:
33:92:72:69:0a:79:78:ba:8a:7a:61:17:c5:1a:64:
1b:ce:ed:5b:c9:55:8d:3e:12:55:40:96:d6:0c:7f:
6e:d9:17:86:fd:4a:08:5c:29:a2:f7:7d:81:18:a6:
b0:a9:5e:75:40:21:92:7c:50:07:75:71:cc:9e:c0:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:41:4A:57:4A:C6:50:41:8A:34:9E:67:C7:F1:43:C0:93:EA:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:30:6d:1d:2d:8c:b0:94:c8:8a:ac:2f:a8:5c:d5:cc:71:06:
c2:91:dc:d3:59:a4:e8:24:4b:ef:77:1f:a3:97:68:c5:45:d1:
d1:72:84:f9:38:83:97:a6:56:b8:70:79:f8:fb:7d:a5:ec:60:
ce:63:78:70:04:89:fa:86:46:15:75:dd:e1:86:1b:cb:29:0b:
e2:c7:ef:47:ab:10:59:4c:ee:56:93:ab:75:79:b1:7d:4f:6f:
33:e9:91:89:fc:3a:ec:04:6e:73:43:6c:f4:37:81:df:b5:69:
85:5f:ec:1a:93:8a:09:51:cc:51:bf:40:10:86:da:fd:54:61:
9a:19:07:c1:96:80:22:76:9c:ef:44:49:81:4f:35:fe:ec:0e:
53:38:20:39:3f:c5:82:a9:ce:94:85:6c:9f:f5:00:d9:74:a8:
3c:70:b3:d8:66:11:c2:1c:e9:4b:7e:f6:45:24:28:91:66:b6:
e8:a1:d0:23:2e:04:53:84:ed:0a:f7:16:3a:3f:9f:9b:08:7e:
f4:ec:3e:60:a3:55:2b:79:0b:41:d7:17:90:1e:a9:0c:0e:ca:
6c:58:42:c8:3d:df:dc:f8:f3:00:c3:da:15:4c:39:54:4b:8a:
8b:6f:fa:8c:23:8f:3a:58:0a:47:cd:9c:34:d2:de:35:62:be:
2d:37:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:05 2025 by rpki-client