Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
File: 520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa (raw, json)
Hash identifier: bFUfQnlyaGVnqDCWFcPMoWXIFA7Gsrd2JAXx1teXQ4Y=
Subject key identifier: 85:B0:54:63:14:84:C8:2E:78:98:70:F6:5D:BD:26:6E:61:C0:D2:76
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285848FD56AAFE46A9C142B7C4FE00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53720
IP address blocks: 24.246.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:aa:fe:46:a9:c1:42:b7:c4:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=d1a05df7-bd11-4a38-875c-f1c020377a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:af:84:9c:4d:65:73:a1:53:a2:60:11:d5:
f8:5b:27:0e:b9:70:61:5d:74:a6:f8:9f:b7:78:b3:
80:90:0d:fc:6a:1f:7e:43:03:60:d2:1a:86:17:b6:
20:24:3c:b8:4a:76:36:70:3f:f9:41:d9:40:23:cb:
01:81:be:85:89:73:57:b9:da:c7:a9:6c:97:7c:a0:
5e:cd:b7:72:b4:cb:f5:b3:95:34:84:bb:29:62:85:
ea:ca:e6:8d:96:e2:d7:8b:ad:f9:49:09:75:df:ee:
ab:e3:95:2a:cf:98:e0:f5:42:21:3d:8a:98:49:2b:
e3:f7:bf:b2:07:c6:35:1d:a9:01:15:e3:c5:6c:3a:
50:b3:bd:59:12:62:f6:3e:a6:9e:d0:1d:15:40:e5:
1d:69:5e:6b:dd:eb:69:c4:73:83:0c:89:ae:75:88:
c6:16:00:77:5d:cd:27:8f:9e:8b:00:e3:8b:8a:1e:
7e:33:4d:d6:1b:b2:65:de:71:1f:51:c1:9e:bb:3e:
18:a4:e4:ca:9b:e8:cc:13:f2:2e:29:26:fa:8b:c8:
c3:98:47:9e:8a:d5:5f:9e:ba:c3:1d:a2:9e:01:4b:
00:ae:ac:94:ca:8e:3b:63:fd:ac:97:4e:19:a4:14:
26:03:70:91:a9:ed:e7:01:92:5c:c4:5a:e8:92:63:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:54:63:14:84:C8:2E:78:98:70:F6:5D:BD:26:6E:61:C0:D2:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.246.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:9e:22:5c:5b:0f:1b:d7:28:6b:88:01:50:91:d3:d4:87:26:
f4:c2:44:f5:fc:3c:ea:c8:fe:04:d8:f4:a8:3f:b4:32:9c:0d:
68:3e:51:22:47:76:99:be:15:20:40:9d:49:e9:ad:b5:33:15:
8b:2a:6b:00:a0:de:5a:9b:02:2f:89:60:95:64:4a:11:03:1d:
98:6a:2c:2a:f8:5c:19:8f:d0:4e:7a:1a:19:a1:d6:5e:82:ed:
e1:cc:1a:99:fc:17:52:04:52:9c:ab:f6:31:ce:6e:8e:bd:73:
ce:9e:c5:33:61:4a:61:be:82:8d:01:1a:64:20:d6:36:2a:56:
3b:bb:60:cf:8f:ec:a6:5c:27:47:6a:1b:78:01:4c:0b:24:53:
72:f5:22:56:10:54:d3:ba:bf:20:07:e9:ae:ff:b3:3f:bb:e2:
d9:c4:d9:aa:68:41:9b:7a:45:70:e2:84:d4:6f:da:0d:3a:6b:
fa:8e:10:fb:ba:88:37:38:fc:6a:bb:e4:1d:d8:f2:fa:d5:2c:
6e:d3:75:14:66:a5:ce:bb:df:10:e6:82:e7:5f:a2:26:da:9f:
dd:d1:ae:b4:ff:8f:94:b1:93:1f:b7:84:a2:f7:d0:51:c6:3b:
7b:a8:81:bc:5c:a9:62:5e:8f:cf:55:5a:60:70:c3:83:2c:7d:
29:86:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:46 2025 by rpki-client