Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa
File: cf326abc-d15b-3239-975e-23598674000e.roa (raw, json)
Hash identifier: GCpA1vno2eXmn0u7Wk0Rqv45w76Ka5VxCXLlAmkrUsc=
Subject key identifier: F8:7A:13:06:D4:1B:56:5D:AD:4B:01:42:87:91:D6:3A:92:26:2F:59
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB091DD3CC034199072700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.52.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:09:1d:d3:cc:03:41:99:07:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=a98f9f07-d081-4c1a-a86e-f7faeac7299c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:28:59:33:58:86:0b:92:ca:81:a1:4c:e7:
99:3d:19:03:c9:c5:cc:b1:82:16:86:2f:d5:84:a4:
41:fb:21:63:4b:37:6a:ad:ca:74:d4:9f:14:47:63:
1a:e3:0b:09:51:9a:90:36:a0:3a:7e:c5:14:66:cc:
2b:7a:9f:51:a2:4f:74:db:88:15:39:30:35:21:19:
fe:b0:1d:47:c9:d8:d4:99:3f:e7:d7:e6:fd:f6:8b:
e5:5a:00:90:ee:18:8e:d4:0f:53:2a:0b:65:3b:1b:
1d:60:e5:22:c9:2c:6d:3c:7c:59:44:ba:a8:89:0e:
5f:0e:7e:61:11:a7:a9:46:70:b6:83:20:c2:81:34:
29:c3:68:cb:18:b0:c2:18:11:5d:e0:0c:de:38:ca:
cc:4d:23:98:e5:44:62:42:81:5b:be:52:c6:c3:66:
47:51:82:51:ca:f5:b8:f0:99:d6:11:42:2e:a8:1f:
57:7e:3f:fc:44:e9:8a:6a:11:07:63:42:d4:83:fe:
33:e0:fe:3c:a8:c2:24:eb:f3:94:b4:09:86:55:24:
d4:a0:1f:f5:b9:57:8f:55:fd:e1:05:b9:37:d9:28:
3a:a0:79:fa:37:e9:9a:ca:5b:2c:df:5a:40:57:0e:
fb:3a:cf:fe:ed:10:6f:6a:1f:72:e9:6b:e2:cf:9c:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:13:06:D4:1B:56:5D:AD:4B:01:42:87:91:D6:3A:92:26:2F:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.52.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:81:c7:8c:f6:a4:f7:58:fa:d1:3c:7c:ba:3b:ff:33:01:99:
82:c4:b8:be:25:df:8a:f0:bd:4e:47:f2:4e:db:42:bc:4b:c9:
0e:8e:b3:7f:32:85:6f:71:9e:22:e3:69:83:11:3b:3f:1b:e7:
63:f4:8d:63:6e:af:46:02:15:50:d4:0a:34:3e:18:0f:07:32:
d0:24:68:89:b4:52:47:1a:81:86:c4:a2:70:62:3d:70:2b:ea:
a7:93:87:17:7a:14:13:70:62:c2:37:7c:ee:c3:7a:77:05:15:
95:e3:88:07:83:5c:d0:3f:f9:66:18:a8:ef:2e:9e:a1:fa:3e:
06:a1:7e:0d:bb:ef:7e:0d:62:2b:a2:a6:aa:4f:ea:ba:72:d6:
06:41:85:ed:5c:e6:9b:49:a6:c5:a3:17:a1:eb:a7:c3:4f:b4:
db:2f:cc:0f:41:62:e9:dc:8f:1c:bb:04:88:44:e0:bd:9e:7d:
ca:f9:17:0a:0d:cd:34:b7:d3:86:e7:35:6d:28:1e:ff:38:8b:
37:40:e9:40:76:fb:81:71:af:aa:64:b7:f3:c5:97:aa:45:d9:
08:dc:a4:ed:f1:2d:d8:ca:29:37:62:17:fe:46:ab:38:76:da:
1c:16:fb:1c:9a:62:23:65:36:3e:73:d6:12:e2:dc:ab:40:b7:
da:ca:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:59 2025 by rpki-client