Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa
File: 5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa (raw, json)
Hash identifier: hRZmiCYEurFuB0/sBOVDGVmRWudjvoPZQzwmzCp2dhM=
Subject key identifier: 1B:E9:A2:B0:3D:FB:05:B2:00:FC:C3:AB:06:32:21:76:B4:1F:E3:7C
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F4328584832F02E199094833EE228AA00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 18960
IP address blocks: 24.38.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2e:19:90:94:83:3e:e2:28:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ccf310ee-7c2e-4159-83bc-e901edbd145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:32:b1:fe:58:7c:66:f3:d5:f1:b7:30:c5:
d7:40:0f:11:95:ef:a3:12:d8:a4:96:4c:11:8d:29:
b5:9c:48:ee:01:22:31:6d:ba:80:e5:c6:ef:fc:3d:
66:c2:63:d5:ca:e9:f5:58:29:67:39:0b:ee:c2:87:
74:8e:c3:65:a0:e0:db:f9:b4:5c:c7:6f:b0:cd:c0:
58:c3:b2:2a:1e:55:ad:68:a8:11:b9:1e:df:75:a6:
6c:c0:ff:d6:9c:03:8e:a4:76:25:0b:05:0f:27:a4:
dd:49:31:82:1a:7c:4f:a6:65:56:b2:1c:93:b1:5e:
5b:6f:32:7f:f4:0d:52:5c:c1:5a:7d:10:f4:4d:a3:
25:cb:c1:12:dd:75:1c:7a:76:a1:58:d6:29:ab:dc:
89:51:9e:65:c8:44:a5:39:24:37:05:af:dc:95:00:
0e:7d:85:31:2d:a1:9f:a5:5c:f0:95:91:e3:f4:ab:
a8:ae:04:53:0a:e7:dd:ed:6b:d7:99:fe:ff:d9:52:
f1:ee:48:47:fd:50:69:d8:33:f7:64:8f:54:68:99:
72:81:17:76:ff:be:f8:38:32:e9:e1:c5:8e:b3:3a:
42:c0:98:6b:c3:33:fe:87:9c:4a:32:d7:6d:a1:6d:
b1:e9:b0:d2:21:6d:a7:79:c2:47:db:85:79:04:43:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:A2:B0:3D:FB:05:B2:00:FC:C3:AB:06:32:21:76:B4:1F:E3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5ee3aaf7-3b01-3ece-a669-fe1de5dd9a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:97:68:36:0d:dc:e8:ea:5b:f1:07:5c:20:67:d2:59:05:27:
0a:66:4e:74:f1:80:67:d1:8f:c8:4a:1d:9f:9d:45:00:15:4e:
08:30:d1:5f:b2:3c:af:35:cc:de:3d:f3:9a:d7:5f:44:2e:da:
17:82:75:30:f6:30:82:e4:53:4d:2a:c7:d7:34:98:9f:c1:38:
db:bd:fb:02:07:6f:c2:44:42:08:9c:33:9a:cd:4e:f0:58:57:
fd:4b:3c:26:3b:c7:2d:98:c7:2f:91:01:3d:79:84:9e:0b:3a:
df:b4:b9:81:af:e9:8c:47:be:52:52:5e:14:48:a7:69:95:c6:
da:cf:fd:79:a5:46:79:2f:08:82:af:7d:8e:f0:87:e2:0a:4e:
c2:9b:85:6b:93:b4:40:59:fd:f6:03:4f:77:17:fc:56:0e:c1:
54:bc:cf:a5:dd:e0:79:22:b0:8d:50:df:2e:6d:1a:01:8a:51:
3a:41:5a:02:a2:a3:e5:e1:49:3f:b5:62:9d:9f:96:a0:0d:7a:
24:69:75:0b:6e:31:c1:43:0c:b8:71:a7:cb:9a:c5:26:31:d6:
eb:0f:d4:99:c2:56:17:c1:2a:a2:dd:85:b4:0f:b5:ea:b5:f5:
5c:a9:6f:61:ad:a8:80:bc:e9:44:f0:c3:33:4a:57:6b:be:0a:
f8:90:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:13:38 2025 by rpki-client