Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2deaaf20-e662-3f02-aed2-6a9265122f91.roa
File: 2deaaf20-e662-3f02-aed2-6a9265122f91.roa (raw, json)
Hash identifier: a1Xs+UoV+7ZJHZ9qgGLC2EFfhrnzV0b0E0lEDm/6m8I=
Subject key identifier: 3C:A9:80:31:19:B8:16:5D:44:36:76:94:DE:0F:CA:95:7D:0C:E9:CA
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285848653040F54F12EE3B7804D1C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2deaaf20-e662-3f02-aed2-6a9265122f91.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.56.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:40:f5:4f:12:ee:3b:78:04:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=4de2c3bf-0fa5-4bef-a8dd-92b0d9a5d026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:f9:1e:01:db:54:8a:cd:46:09:74:9b:20:
03:cf:73:0e:77:14:01:71:9e:dc:20:e2:f2:86:19:
81:3d:77:68:2f:16:da:3b:37:91:fb:c4:52:bb:6c:
46:b3:ac:2d:cf:a2:a0:e5:ff:e5:ef:9b:88:73:2d:
dd:f9:85:67:e7:63:b2:67:41:cf:49:fe:e6:a2:53:
cf:2e:02:20:41:ff:2a:b5:0f:29:32:e1:f2:47:bf:
3e:02:60:86:ba:56:1f:af:de:40:8a:df:b5:f9:54:
10:23:99:ce:df:47:b7:ab:64:bb:33:c5:83:4f:56:
c8:ba:ae:3a:3c:8d:70:31:47:46:cf:de:05:f7:73:
e2:f2:3e:81:aa:e8:73:f0:02:55:34:65:26:e0:06:
68:ba:7d:e8:0a:4e:83:64:a6:94:4c:cc:67:fe:8a:
cd:e2:aa:f1:31:78:e0:60:c1:36:ef:b8:f3:37:70:
b0:73:b3:f9:63:5b:04:88:33:ce:69:f5:1b:7e:09:
ec:3a:b8:a1:a5:66:6b:30:70:42:b4:56:17:04:c8:
c1:58:42:54:99:59:cc:3b:12:7a:28:d2:d4:47:96:
58:06:6c:2e:fd:0b:31:7f:c2:1b:d8:bc:0d:68:f4:
ee:b1:5e:88:f9:2f:da:e8:55:1c:4d:1a:79:cd:5d:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A9:80:31:19:B8:16:5D:44:36:76:94:DE:0F:CA:95:7D:0C:E9:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2deaaf20-e662-3f02-aed2-6a9265122f91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:27:b3:32:81:60:8c:5f:04:eb:6a:56:09:8a:89:8b:b7:56:
ac:c4:24:0c:22:76:b6:05:a7:4a:8e:8a:e8:31:c7:c5:2d:f7:
45:25:fd:20:47:90:c5:f0:50:d8:87:f9:11:4a:da:3d:03:84:
fe:ba:f9:66:47:f4:b9:2a:6e:52:a0:b4:b2:35:92:8b:53:ce:
03:5e:51:f1:19:ab:d4:d8:82:47:f5:67:19:84:ac:46:cf:c5:
97:4b:77:1f:cc:7d:2e:20:f7:aa:97:49:64:18:d4:6c:a7:d5:
62:46:64:56:1e:2a:9c:bc:79:2b:d6:22:cf:7a:8d:82:bf:a8:
99:e3:9d:9c:cd:24:bd:55:63:85:00:20:98:9e:44:d4:65:8d:
45:0a:06:d3:05:11:e4:53:1a:3a:b6:c6:3b:bd:f5:42:a4:18:
85:15:ba:6f:f5:d6:48:5e:ab:6c:a7:6c:1c:7f:43:d7:4b:46:
02:96:86:d2:b7:16:b4:28:fb:88:fd:b0:1f:58:d0:37:1d:a1:
9f:5e:5a:7b:6b:62:9d:58:2a:ef:95:db:af:d2:00:b1:63:ec:
43:27:6c:d5:3d:3a:b7:24:98:82:c8:c1:50:9f:aa:56:b6:9a:
e2:ed:2a:17:bb:86:8a:44:eb:4f:32:fa:2f:be:e4:1d:97:2a:
60:91:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:18 2025 by rpki-client