Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa
File: e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa (raw, json)
Hash identifier: HB6lowBRXOukwfp+inOCXvqjaL4KWxkeOeJv8oF4ink=
Subject key identifier: BC:A6:21:FE:C8:60:D8:52:A7:DD:8B:22:FA:51:E7:05:2F:D8:E0:3C
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB090D07260C20870B7200
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.236.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:09:0d:07:26:0c:20:87:0b:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=4ea7c695-815b-4c16-a3a4-4b28d68a61ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:0e:63:60:55:ff:fa:7d:99:87:76:29:d4:
c5:79:60:e8:1a:17:c8:e4:87:4e:37:4d:bf:ca:a9:
c0:3e:b7:ee:7c:8b:fc:1c:be:33:33:45:b4:4b:59:
51:17:59:35:e2:90:f9:33:b4:b4:ca:a1:58:45:78:
b7:bd:f1:27:07:57:a6:39:92:c2:56:21:37:64:6e:
d1:c4:5e:b8:b7:db:ab:7e:7c:10:69:5e:aa:09:a2:
68:a3:33:31:9c:45:14:0a:3f:d2:6b:34:21:83:a5:
b9:05:bb:e2:09:8c:3e:9f:d3:fa:41:88:b4:b7:b1:
95:af:7a:db:3e:aa:01:a5:67:78:bc:54:11:a1:74:
98:7f:40:2a:8b:0a:76:3f:c4:9f:bc:8c:c0:63:fc:
8c:53:a0:0f:e9:62:98:23:c5:15:46:7a:30:64:0e:
b1:f5:4d:32:a0:53:62:0f:76:13:49:a6:c6:27:c2:
46:e9:33:86:39:e6:13:38:4c:04:e8:8a:c5:0b:0c:
b1:13:45:99:04:8e:c6:4c:fe:60:c1:b6:e6:40:19:
13:8a:47:8a:78:ac:a5:fc:35:19:a2:65:64:50:6b:
b4:90:26:17:07:f7:5e:6e:5d:de:2b:e3:10:ee:f5:
3f:03:91:87:49:51:1e:38:c1:75:84:30:23:3f:e0:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:21:FE:C8:60:D8:52:A7:DD:8B:22:FA:51:E7:05:2F:D8:E0:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e0b0cfbe-4a26-36d9-8010-d5660d2f9046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.236.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:ba:d0:39:b0:a6:fc:a6:63:e0:bd:39:62:5b:c6:3f:f2:9a:
03:79:fb:72:df:d7:47:a8:68:62:e0:94:6a:8b:dd:41:7e:a9:
86:d2:e2:13:00:ef:c9:b9:c1:c5:c5:6b:a9:23:be:63:72:0c:
ee:24:2c:7e:fe:db:e2:a8:e3:53:74:e8:6f:32:c4:13:05:ac:
63:a5:85:a2:2a:eb:5c:08:9d:f0:90:eb:f4:35:1e:61:c2:c2:
4b:4c:b9:28:59:f4:29:85:91:ab:24:77:07:7c:d0:c5:18:1a:
95:ec:8b:74:b8:52:45:4f:8d:9b:2c:1a:4c:7f:73:39:36:39:
ac:f7:14:4b:83:ab:08:47:49:06:99:7e:21:70:38:b2:bb:99:
ab:1b:d2:c7:78:82:43:cf:73:0c:ab:d1:79:54:db:79:85:a5:
44:24:5a:5f:2f:be:74:51:f3:2a:af:ce:b2:f3:75:72:08:71:
28:4d:d4:dc:bc:0b:21:a1:c0:5b:92:06:91:b2:c7:fe:49:0a:
ea:15:80:a4:0e:e0:62:38:a1:04:b0:0d:57:d3:11:ac:12:fd:
d9:46:c8:7d:41:0e:b2:df:6e:99:54:e1:d9:ed:52:0a:59:0e:
e2:4f:96:0c:e5:84:b9:fe:c5:af:29:db:a0:db:21:bd:88:54:
76:a8:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:36 2025 by rpki-client