Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/74d953c8-40bc-3c40-9792-858d4394906e.roa
File: 74d953c8-40bc-3c40-9792-858d4394906e.roa (raw, json)
Hash identifier: mS0GDFlNszsT7WQThpySEhYD/P7s+SW29obOFOYYqo0=
Subject key identifier: 64:C8:DD:E8:E1:CE:4E:08:9C:F6:75:76:C8:F6:E9:AA:3D:D7:7C:FD
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905DBB858A3B6D96D885C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/74d953c8-40bc-3c40-9792-858d4394906e.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.124.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5d:bb:85:8a:3b:6d:96:d8:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=0fdb43d6-8fd1-4abb-9f43-0fc24cf4542b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:e7:27:00:64:3c:28:19:94:a0:6c:25:24:
25:6e:b5:56:83:d7:c4:5f:f8:15:93:41:8b:e9:d3:
d1:6a:8e:d1:32:68:be:76:12:1d:17:4c:3a:4d:af:
f1:89:cb:f2:f1:a6:0d:92:5f:6c:04:b0:8f:63:56:
07:70:44:ad:18:25:34:83:0a:88:6a:78:d0:b3:b1:
0f:7e:11:55:5b:88:b5:ad:4c:20:7f:a8:b6:16:9d:
24:02:8c:76:51:fa:50:39:ce:d5:21:c5:3a:ad:f0:
8e:af:e8:51:2a:3c:a3:66:ef:7b:a7:2d:d5:b2:e2:
d5:ee:63:eb:45:08:c1:72:69:4b:8a:3f:c4:cd:40:
94:8c:7e:22:76:b2:70:0b:b6:dd:9e:a4:90:01:c5:
c3:ea:3d:46:36:8d:87:96:c7:dd:eb:0e:0e:ab:c5:
38:f7:53:c2:4c:c1:4a:9f:46:f4:8b:29:7b:83:09:
29:94:ab:98:70:49:78:d4:29:a9:42:3d:77:5c:10:
b9:22:0d:d0:36:3f:fb:c8:2d:53:e2:3b:82:4c:95:
3c:3c:59:09:13:9b:c5:05:02:d7:34:8b:62:23:78:
f6:82:72:b2:15:01:ea:0d:12:8b:50:d8:e7:a1:5e:
0e:63:3f:0c:55:f9:83:de:b6:fa:ff:2c:47:1a:a9:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:DD:E8:E1:CE:4E:08:9C:F6:75:76:C8:F6:E9:AA:3D:D7:7C:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/74d953c8-40bc-3c40-9792-858d4394906e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:6d:d9:8c:a6:8d:19:4b:fe:1a:d6:e6:21:e7:7b:c1:7a:36:
b7:27:47:cf:7c:05:db:e7:5f:33:44:ed:48:c7:43:aa:3c:de:
be:d5:37:5e:3a:48:44:e1:c6:04:97:60:13:8f:35:1e:dc:16:
cd:52:23:8b:2f:e7:1d:4c:5a:76:b9:fc:90:22:c1:4a:0f:7b:
3f:ca:62:63:f9:bb:63:e2:c9:6a:c7:95:99:67:41:e1:90:9c:
e2:50:4c:c0:e6:e9:9f:b3:29:51:dd:ab:d4:0c:8f:a2:6a:4c:
37:a5:cc:12:c5:35:36:60:c4:bf:95:6b:e5:f8:a8:3d:c4:cb:
26:f4:48:6c:28:d9:35:53:9e:f1:db:10:0c:5e:7e:f0:09:02:
3f:98:aa:e2:ae:d1:89:5f:0f:2a:cc:39:ac:f5:01:fc:f3:4b:
59:a9:bf:a1:d4:30:13:ed:17:06:7c:bd:f6:8f:b6:d7:21:19:
51:96:bb:8c:a6:78:0f:c6:f2:5e:dd:ba:c5:81:2c:8f:f9:01:
e1:45:88:95:32:ce:b4:0e:aa:28:7e:d1:b7:10:9e:f0:f3:72:
1e:84:b5:1e:88:a0:72:b6:71:77:36:e3:ec:53:3d:58:74:43:
45:69:dd:6c:17:43:9f:86:e4:64:bd:2f:17:82:6b:34:8b:1d:
c2:25:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:02 2025 by rpki-client