Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44f994d4-9182-3c13-b44b-65aacfd521c3.roa
File: 44f994d4-9182-3c13-b44b-65aacfd521c3.roa (raw, json)
Hash identifier: HxhIxazUi1buppUalR7sdIV7IgbFfHG7sgkSrL22HO8=
Subject key identifier: E1:65:A9:DC:34:76:85:5C:B9:D7:86:9D:74:D9:88:8C:4F:21:D9:5A
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285848100A8AD7925DC36B6BB35500
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44f994d4-9182-3c13-b44b-65aacfd521c3.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 13639
IP address blocks: 24.157.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8a:d7:92:5d:c3:6b:6b:b3:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=4d17a529-d9e8-461f-bfb2-cf88795375a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:89:3f:31:f4:c5:80:69:d0:55:2a:18:db:
da:2f:22:81:a1:69:3e:1b:ae:47:81:f9:22:9e:38:
5a:ae:9e:50:9c:eb:22:ae:35:a3:67:06:66:55:cf:
a2:f8:51:94:46:8b:92:3d:7c:c4:f3:a2:00:eb:fa:
64:f7:6e:c7:75:9f:a5:71:90:f6:f9:79:23:11:ab:
84:a9:fc:85:20:74:04:1c:79:75:2a:30:ca:4d:55:
c7:aa:27:81:e3:b4:25:be:e6:ff:7c:2f:dd:3f:bb:
52:08:b9:76:c9:36:1f:ac:a3:a8:b1:10:a3:2e:c7:
9e:4c:5e:ad:29:0e:6d:e2:58:fc:fe:bc:28:9c:bb:
12:0f:1e:6d:12:d7:40:20:fc:df:38:d5:d2:5f:d8:
eb:8c:7b:98:9f:a4:50:7d:08:10:f1:95:bc:fc:19:
fa:ed:a6:f3:c5:f5:5c:27:53:10:a8:24:e7:c2:da:
23:1f:29:05:b4:8a:1e:dc:73:57:95:14:3b:b1:46:
e5:26:87:ce:7a:02:14:0d:16:51:d0:76:72:67:ad:
be:97:af:79:b3:96:59:a9:9c:b5:30:76:b5:ce:c1:
0d:91:09:36:e3:b7:b0:75:56:85:d2:d7:52:85:a3:
45:31:69:ee:f1:22:79:bd:54:7f:26:f7:d7:13:99:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:A9:DC:34:76:85:5C:B9:D7:86:9D:74:D9:88:8C:4F:21:D9:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44f994d4-9182-3c13-b44b-65aacfd521c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.157.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:aa:b2:6b:cd:14:ee:84:65:1c:29:2e:f3:1b:35:f2:1d:42:
48:f3:41:47:b8:03:7e:28:9a:c4:6f:33:8e:84:f2:c3:53:47:
cc:95:9d:13:8d:7e:37:1c:20:8a:be:fd:71:11:07:6c:51:11:
74:7d:1a:7e:84:a5:78:cb:4b:40:13:6b:8c:c3:d5:ed:ce:d3:
03:79:b3:26:19:2d:ee:f1:36:52:90:34:f5:ed:d4:63:c9:15:
54:05:52:c0:de:e6:bc:ef:9f:96:d4:ba:b0:58:28:82:9a:8e:
c7:49:92:c6:65:51:3d:75:f1:64:27:5e:9c:33:1b:5e:d9:b5:
ab:f0:4c:7f:fc:33:e3:10:b4:f0:e8:47:4e:4b:94:ac:1a:ea:
c2:6e:73:46:ba:2d:8c:08:a3:91:9f:7d:60:d4:4a:1e:bd:fa:
dd:f1:60:19:11:d7:4e:23:b2:df:1f:e2:bc:6c:f7:4d:95:aa:
a8:48:6a:44:d6:66:fa:1e:89:8e:31:f9:0a:5e:e6:e1:21:5d:
a8:0d:7c:c9:83:98:2d:7d:29:c2:a5:48:bc:5b:24:89:12:9e:
15:21:4b:00:e2:86:8b:e8:29:55:5b:21:91:ac:ff:2d:f3:e7:
e5:8c:08:9a:af:15:e1:f3:c2:77:1e:b8:83:5d:ca:8b:a0:9b:
60:02:b6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:30 2025 by rpki-client