Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa
File: 9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa (raw, json)
Hash identifier: +sSZ20mqvaM1DUiNAm7KULCvkswGlOrR+NRP1guyOks=
Subject key identifier: B6:A0:68:4F:CB:E1:E1:75:95:FF:BE:7B:7B:92:C9:F4:E7:A9:BC:27
Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5
Certificate serial: 010D0C9F43285847FDE4D2B9A02D47AA5E1DFF80
Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 6939
IP address blocks: 72.21.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d2:b9:a0:2d:47:aa:5e:1d:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=4f654226-cf33-46d0-b0d0-dee36fddb300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:59:7a:d8:ce:7b:24:d3:80:24:40:72:ac:
23:ad:3a:8f:61:64:36:e5:64:ce:42:08:d2:fd:5d:
04:af:79:f4:07:64:15:6e:57:69:75:02:08:73:c9:
36:52:19:98:98:9f:da:21:ea:2d:f6:34:f9:94:3b:
75:bc:a7:c6:6d:0c:a4:0d:9b:ce:42:f8:a7:5b:5b:
4f:3a:fc:93:90:ea:c7:89:7a:fe:3f:b1:e0:c3:d3:
1c:c7:4c:2e:c7:bb:4f:5d:f4:9e:2e:34:c6:c9:3f:
c5:d4:a3:47:47:fb:c0:21:73:2e:7b:11:59:1e:97:
4a:d2:ae:66:8d:a5:29:2f:cb:a2:28:ec:9f:7b:6e:
21:7c:3a:93:41:b3:42:af:fe:0d:9f:f9:50:7b:4f:
e6:b4:c2:a2:ef:6c:fa:4a:f4:27:57:83:46:c3:d0:
8f:17:ef:4e:6f:b2:01:e0:85:c5:95:10:2e:9f:96:
d5:94:49:38:f1:c2:7e:24:ea:f6:35:88:d9:f7:7d:
62:55:8b:1c:82:6a:4f:cb:e7:38:5b:45:36:dd:f6:
62:5d:6a:3c:d8:a5:46:9d:0c:7c:d8:12:a8:97:61:
61:f0:47:2a:a4:e6:5a:75:41:dc:5c:4a:34:d0:13:
40:38:75:7a:53:6b:24:4a:40:e0:d5:5a:66:fa:4e:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:68:4F:CB:E1:E1:75:95:FF:BE:7B:7B:92:C9:F4:E7:A9:BC:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl
X509v3 Authority Key Identifier:
keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:2c:c9:30:96:9f:5f:ea:c5:5c:72:be:e8:40:0a:64:df:eb:
07:f0:b0:82:c0:a8:03:8e:b8:ec:ac:94:14:b1:8c:17:d3:48:
2b:97:2d:2f:0c:e5:12:ea:e5:4d:de:57:17:05:e8:84:81:48:
aa:3b:af:7f:18:50:cc:56:35:d4:ca:f7:ca:88:57:2e:70:4d:
19:bd:79:43:7b:27:ee:46:bb:89:b2:a6:0b:33:52:9c:cd:c6:
91:17:59:39:16:93:a0:9a:85:6b:b0:2a:ad:1b:e3:c7:27:28:
e9:86:0c:19:f4:e5:59:76:65:09:17:81:07:56:70:51:a4:ec:
36:ac:6d:f9:30:d3:8f:1e:8e:dd:48:aa:41:a6:5b:12:19:d4:
df:1a:6d:31:a1:16:6e:be:16:87:fb:0a:7d:2a:da:c9:b4:24:
e8:e2:fa:61:05:3d:76:dd:49:cc:e1:4a:2e:49:99:5c:7f:da:
de:70:f5:7c:3d:f6:9d:f5:0e:08:d7:5e:90:39:f2:e5:c0:46:
f6:82:7c:a1:f5:33:34:d1:d9:1c:78:cc:a9:52:e3:d6:9d:42:
1c:e3:6a:77:d0:ab:c1:63:a4:e2:27:de:6b:7e:4c:f9:2a:75:
a9:05:72:3f:34:bf:6c:12:b5:fb:a8:a0:8d:47:c1:f3:55:17:
d7:88:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:19 2025 by rpki-client