Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0562bc53-574a-38f4-be5b-64fa50fb3715.roa
File: 0562bc53-574a-38f4-be5b-64fa50fb3715.roa (raw, json)
Hash identifier: WmjAVYHsxkkgfiR58cD3HSfzrnyvCwiooXlVfYPb68s=
Subject key identifier: 62:AD:3B:EC:06:C7:98:2F:D7:19:51:0A:63:93:7A:33:3F:CA:87:C2
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865304031A29325743C25EC80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0562bc53-574a-38f4-be5b-64fa50fb3715.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.49.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:40:31:a2:93:25:74:3c:25:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=c249ea04-4dab-44a2-a541-cd98234fc226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:93:bf:23:62:e2:41:28:31:8c:d2:db:ec:
9c:24:88:b6:64:83:61:f9:f4:e8:ab:b3:59:71:25:
05:ce:83:3e:c6:4d:06:ce:e5:82:d8:a8:2a:c1:f9:
b5:e5:36:62:83:c9:e4:05:88:85:a0:2c:72:47:93:
bb:47:8e:d5:6d:95:6b:88:52:39:ea:52:33:35:4c:
91:dc:30:5f:41:18:1c:fd:4d:4e:00:2b:30:82:d6:
cc:a1:2f:0a:04:17:bb:30:89:89:9d:e0:4f:77:e6:
e7:aa:4c:a1:0a:80:8f:9b:e1:13:d2:c0:b5:54:69:
59:81:aa:43:6a:95:ac:08:d9:d0:3c:0b:2d:46:9f:
aa:34:43:4b:08:ac:7e:cd:8a:93:17:06:10:ac:84:
8c:62:d6:53:80:c1:2d:2f:1e:03:2f:70:48:cd:42:
26:95:25:22:2e:99:bf:64:bc:b5:4e:0d:26:f5:ef:
ed:e1:7f:02:7e:b4:90:a7:af:fc:c0:0c:96:89:d4:
84:36:88:1f:fd:23:19:99:99:59:37:7c:71:62:cd:
33:9c:96:37:00:b7:30:c4:50:dc:21:43:fc:3c:6e:
b8:c6:5b:bb:0a:3b:e7:fc:c6:12:79:2c:17:4a:58:
ac:43:b6:8f:5f:87:a0:2a:92:5b:2c:16:aa:2c:c6:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AD:3B:EC:06:C7:98:2F:D7:19:51:0A:63:93:7A:33:3F:CA:87:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0562bc53-574a-38f4-be5b-64fa50fb3715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:07:29:4d:9b:cf:0f:fb:df:19:11:e7:1f:63:9f:a3:58:dc:
f4:f2:03:66:cb:eb:84:c8:a0:0a:34:a3:f1:44:2f:4e:01:bf:
8e:95:a2:58:21:44:93:50:67:f9:7f:37:1f:ce:d1:39:93:38:
94:87:7e:b2:8d:03:e7:fe:e3:f5:cd:1f:58:f0:fd:a1:f3:d2:
0e:e7:3f:2e:9a:62:8a:5d:2e:a9:5f:d2:1c:26:8e:1e:86:e3:
d8:94:49:91:df:0b:2d:b2:b8:df:32:72:9f:6a:73:5e:56:2f:
c3:17:8f:ad:d5:33:3c:49:f3:8f:b1:c9:67:cc:17:cc:a4:2c:
89:b1:f0:9b:88:d6:61:dc:ce:57:e1:00:83:39:ea:c2:79:b9:
95:ca:e6:3d:3d:a4:9f:b9:d4:1d:0a:6e:79:42:9d:96:dd:57:
b6:ad:5c:41:78:25:57:1f:58:7e:40:db:92:ce:52:47:9c:29:
c5:56:38:92:1d:e0:b6:b6:8a:c8:84:36:5a:de:3d:a9:74:b5:
ea:2d:18:d7:63:37:2b:83:87:35:77:17:65:52:3d:1e:e6:e9:
1d:ba:cc:e2:58:a4:12:2d:24:ce:77:4b:d0:35:c0:14:41:10:
e4:35:ed:ec:f3:46:97:1f:fc:43:c3:1e:46:37:72:c0:a4:eb:
4e:f6:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:40 2025 by rpki-client