Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/24b53d29-2234-3292-b3be-0b5e35e38bce.roa
File: 24b53d29-2234-3292-b3be-0b5e35e38bce.roa (raw, json)
Hash identifier: sBq22TJX6QHqCzigJFQK6XeIp9CVHzn8nr4ikxu3j0Q=
Subject key identifier: 55:C7:77:2C:77:7D:6D:3C:29:32:B0:35:85:D7:E4:B6:20:39:88:58
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F4328584829443F28AE8BA994A35E2F80
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/24b53d29-2234-3292-b3be-0b5e35e38bce.roa
Signing time: Tue 10 Dec 2024 14:52:32 +0000
ROA not before: Tue 10 Dec 2024 14:52:32 +0000
ROA not after: Mon 10 Mar 2025 13:52:32 +0000
asID: 0
IP address blocks: 169.145.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:44:3f:28:ae:8b:a9:94:a3:5e:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Dec 10 14:52:32 2024 GMT
Not After : Mar 10 13:52:32 2025 GMT
Subject: CN=7b15104c-9f39-42c5-842f-b27e5821107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:22:d1:a1:bc:3d:cd:78:4b:8e:bf:00:ae:
5b:e7:d5:1c:38:7a:9a:fa:d7:ad:9c:d7:6f:68:30:
85:ca:75:46:bf:4c:55:09:9d:de:cb:49:ac:9b:31:
20:4c:51:f2:f1:8e:c3:a3:2c:aa:bf:c7:ec:0c:1b:
30:eb:dd:59:8f:16:af:0a:67:61:36:3e:60:9a:e2:
92:ad:97:ee:e9:87:32:f9:87:5f:b7:a6:f3:a7:18:
dc:61:8f:43:fa:a3:a8:c5:23:33:5f:8c:06:83:ea:
83:2e:7c:e4:f4:46:8c:7f:c0:d0:bd:7f:3a:76:3f:
85:97:20:98:0c:f8:8f:dd:7d:4f:75:8a:0f:83:9f:
65:ef:41:21:72:9d:dd:75:21:12:45:2c:29:1c:ce:
04:94:4c:f8:7e:b5:c3:7b:ae:89:24:07:3e:dd:93:
89:5f:99:08:4e:8f:4f:ec:30:66:d6:e2:18:0c:b3:
23:e2:cb:25:c6:07:96:32:19:03:da:70:c6:ae:23:
eb:a6:8d:e7:1b:05:ea:f6:03:08:b1:b1:b7:a5:8c:
91:ca:91:76:67:8b:e2:76:78:98:2b:06:64:3e:8d:
7b:97:61:9d:f3:64:a8:49:d7:99:8a:8e:51:b6:f7:
6a:34:b2:13:cc:87:8c:a9:65:9d:7a:ab:62:5f:93:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:77:2C:77:7D:6D:3C:29:32:B0:35:85:D7:E4:B6:20:39:88:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/24b53d29-2234-3292-b3be-0b5e35e38bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e7:9d:ff:a7:f4:e3:ae:e7:30:ae:f4:5b:0f:71:69:8f:a3:
07:fb:6e:67:fa:ea:33:ee:6a:fd:8b:5d:bb:f1:2b:5e:14:e7:
49:f6:a9:01:0f:c4:ee:6f:6b:ad:82:5c:ab:ee:fb:c1:17:2e:
c1:5f:96:20:8e:9e:6e:82:1d:f2:59:20:45:db:2e:f1:a7:df:
c3:c2:9a:0f:53:50:e2:d2:ae:b1:c2:fc:48:08:f3:22:73:7a:
f9:b1:7e:85:cd:f7:94:ca:20:7f:23:02:d3:72:af:fd:52:eb:
dc:05:b3:43:46:4f:ab:95:99:b0:db:85:eb:d4:68:fc:96:9e:
27:2f:f7:9d:4e:ba:ab:73:a8:21:c0:aa:b4:ca:50:bf:37:ed:
e9:e6:09:77:fb:fb:62:17:93:34:d5:52:a4:f0:0d:1c:08:d1:
a0:f0:b3:4b:f5:13:4f:51:4d:34:aa:d3:6b:51:12:5d:f4:71:
00:e0:cb:10:bc:82:a9:fd:24:ae:0d:b2:b9:6b:46:e5:f1:4d:
0f:80:86:08:b1:dd:15:3f:5a:2d:b4:fc:07:fd:68:cc:dc:c5:
cd:b6:b3:98:bb:0e:aa:22:90:d7:9f:2e:ed:51:5b:b9:32:4a:
c8:a8:38:46:cb:5e:a2:02:4b:64:16:e6:fa:ef:b6:27:da:66:
5c:43:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:08 2025 by rpki-client