Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa
File: a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa (raw, json)
Hash identifier: S0KVOILjQvBZP2mPFbIH6nw+6reh785ajAz1WcRKkqg=
Subject key identifier: 3C:38:CE:53:4B:A5:07:3A:97:66:44:FF:26:5C:94:AD:B1:DD:03:12
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905E017CFEB6C4A0AA2E00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.124.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5e:01:7c:fe:b6:c4:a0:aa:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=0962c7c1-923b-4424-8787-8bbfdd38fdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:a8:0e:69:b1:ab:c8:ea:8c:c0:06:ac:1c:
25:d7:fa:1f:ff:87:5d:c0:99:be:1d:a9:ab:f1:7b:
b0:e4:1d:57:9c:15:7a:68:bf:39:a3:5c:bc:98:94:
6e:e8:14:be:42:df:dd:b9:af:b0:c1:d3:2a:98:70:
df:6b:b7:02:5e:95:ad:4f:2e:ce:c3:e3:11:96:31:
33:4f:8b:2c:6e:fe:ca:81:00:4a:aa:ad:3c:d7:93:
98:53:61:48:de:90:ab:24:15:f0:98:88:18:ed:47:
56:65:50:b0:ed:a0:99:be:2e:86:31:5e:d1:42:67:
a7:bf:1c:1b:9d:40:c0:0a:31:e2:a1:d5:dd:ef:47:
cf:34:28:1b:e8:f8:c8:2d:4f:28:c2:3d:48:ee:45:
1f:07:f5:59:d9:26:48:92:c2:04:11:64:f3:3e:ca:
72:f7:3e:4e:6a:3a:78:99:4e:35:a1:1f:45:06:6c:
7e:a8:7f:64:12:21:57:18:24:cd:45:19:66:f8:73:
24:50:58:d8:b4:a2:40:ab:08:b8:a8:04:c9:6e:ff:
b3:8a:91:1c:06:28:df:0b:43:29:e9:77:19:9e:a6:
6e:12:0f:e3:9c:bf:29:9f:1d:a9:d7:83:f8:06:de:
37:a2:8d:ef:26:c3:0a:89:60:82:6a:13:c3:cb:47:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:CE:53:4B:A5:07:3A:97:66:44:FF:26:5C:94:AD:B1:DD:03:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:9f:c8:0d:8f:9a:9b:e6:4b:e5:b8:8a:9c:fa:6d:23:95:e6:
3d:b5:08:84:e9:17:eb:b0:19:56:7c:a6:0d:2f:99:93:3b:14:
57:76:fd:e0:a9:6b:94:ce:d5:c6:1b:eb:ca:63:4d:71:19:e2:
23:e8:3c:b8:c6:f9:25:01:a5:cd:95:47:5a:d8:da:26:fd:2c:
17:b2:f6:95:a3:f0:b0:7c:66:21:96:db:98:6e:74:70:88:80:
48:4f:d1:cf:9b:e8:d8:06:9a:ba:36:6c:c6:30:4e:04:00:9f:
cb:d4:a2:7a:63:f5:2c:98:80:51:2a:29:3f:10:87:3e:87:65:
0f:60:7d:be:47:d6:fd:7c:11:8e:e9:50:10:f7:ac:a5:7f:c5:
b7:a7:71:03:83:f6:2f:64:72:15:86:d9:56:92:90:b3:15:a0:
0d:83:9a:df:fd:4f:29:01:99:0b:2e:4d:ee:f6:69:70:ae:51:
02:e4:73:6f:be:e8:db:13:a6:1e:70:77:fd:81:bc:51:ac:33:
b4:ea:6e:b8:3b:32:79:93:a2:68:09:d6:e4:10:9f:f4:65:17:
ff:4d:60:ef:a0:87:7d:c0:22:3d:bc:0d:c9:df:6f:89:55:52:
ad:04:90:c4:c8:92:fb:58:01:22:74:3c:d8:e8:7c:ee:ca:be:
cf:bd:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:12 2025 by rpki-client