Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
File: a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa (raw, json)
Hash identifier: jFGwYCnnThY3FHOXZHm2++gnAjPQES8NtpZpaCXy3EM=
Subject key identifier: 42:A2:2B:D7:CA:55:57:38:99:9C:2E:D1:90:46:5F:22:AE:71:69:3C
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303BD569A6B64AE573F680
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.53.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3b:d5:69:a6:b6:4a:e5:73:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=cf7962e5-79a4-46c1-aa03-92deefbc6960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:63:1b:41:d4:3d:6a:10:4d:d7:2f:92:78:
9a:a7:2f:70:f9:b3:0d:70:b5:ff:08:8a:af:e7:46:
b2:bd:b8:b2:63:8b:42:a8:45:7f:fc:a1:1f:9b:84:
cb:48:b0:87:97:9e:79:06:66:ef:44:62:02:cb:89:
b8:43:fc:f4:1b:ef:86:1c:76:9c:0e:26:44:96:ba:
c0:c3:5f:49:d7:2b:23:aa:9e:80:cf:6f:46:91:1c:
5b:72:4a:e6:1c:42:a7:dd:ad:ef:20:89:c0:ea:40:
52:90:35:04:ae:d4:c4:bf:e4:e5:af:02:6e:81:fb:
8d:9d:30:e6:a5:b7:99:41:01:54:60:d2:90:8a:81:
5c:28:28:b6:50:06:f1:18:30:a2:28:11:5d:92:00:
39:e9:ab:7b:ec:47:5e:c0:8e:2e:36:a4:8b:2a:aa:
16:47:fe:f2:27:87:0a:a7:a1:80:0e:89:a3:c1:46:
f4:bb:29:7f:f9:c0:6e:43:75:71:a4:70:53:a5:3d:
df:41:d3:17:cc:10:ce:83:f0:b1:3f:95:2a:36:47:
a6:77:1f:cf:55:d1:66:7a:9d:6c:9a:f0:e4:fd:1a:
03:bd:cd:91:0e:e1:94:92:e3:51:cc:24:de:fd:46:
dc:b1:95:3a:1a:14:dc:8d:ad:0f:a6:cb:0e:cc:65:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:2B:D7:CA:55:57:38:99:9C:2E:D1:90:46:5F:22:AE:71:69:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:8b:2e:ed:70:1c:80:d7:1c:14:17:53:4d:0e:f8:55:20:3f:
f3:e5:24:51:d5:f0:df:db:89:6f:a0:8a:16:66:1a:d2:72:0c:
34:5f:ea:7c:dc:36:f0:0e:60:6e:6d:8c:73:02:b0:6d:37:bf:
63:e5:bf:70:4c:c7:90:c9:82:d9:a3:75:9a:26:b6:11:db:6a:
06:e1:13:83:21:15:fb:76:48:98:f5:c5:94:0e:cd:45:36:60:
6c:df:fb:85:37:c3:e2:26:2e:b4:db:b8:9e:ec:8f:0a:62:93:
68:3a:45:8c:db:e8:c3:4b:40:de:14:8c:44:05:17:4d:20:84:
1e:a0:f0:52:41:b0:ba:a6:00:0d:cc:0c:e9:f3:42:6e:2a:d1:
fb:87:90:dd:46:dd:22:be:85:ae:2a:a6:f9:a2:a9:cc:f4:c4:
35:07:71:7f:5d:82:6b:b8:aa:3f:63:5f:11:7b:6b:ea:11:d4:
0a:d0:ca:f2:e9:4d:1f:b8:3d:30:63:0c:50:04:08:66:e6:5c:
01:f1:66:a9:d2:bb:b9:df:c8:ac:75:fd:8d:72:e3:f4:aa:d9:
f5:85:3d:91:72:4d:ca:13:90:42:6a:76:05:b2:99:dd:ad:3e:
d2:a8:fd:fd:a0:c5:0f:80:54:92:b6:d6:31:a3:84:28:fc:6a:
0c:0d:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:58:00 2025 by rpki-client