Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/740444f8-f815-30a5-bd88-f3b460d8e9d5.roa
File: 740444f8-f815-30a5-bd88-f3b460d8e9d5.roa (raw, json)
Hash identifier: XrQ9iGO+YRpmJw8y5V34lUlyU6upDAnsJzvK5Tcon0c=
Subject key identifier: 4E:1F:8E:D6:8D:F7:30:0E:E6:6B:FE:C7:C6:43:4E:24:3E:E7:59:0D
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F432858491246AF1D8C4C5EA74BE55220
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/740444f8-f815-30a5-bd88-f3b460d8e9d5.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 32195
IP address blocks: 24.38.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:af:1d:8c:4c:5e:a7:4b:e5:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=c2536d20-0542-4a23-83d4-a4c79c4baad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:3e:58:18:54:0d:aa:6f:12:89:f6:cd:ac:
96:05:c0:75:1c:74:6a:18:fe:89:be:95:24:98:c3:
16:77:86:14:45:4a:d9:7a:7a:cd:ca:2f:59:b7:72:
87:bf:1c:27:2b:dd:83:fd:9f:a7:45:46:01:c8:9f:
4a:9f:b7:0d:c7:a4:d9:7c:c3:9e:1a:dd:cc:78:ae:
72:e2:b4:05:c3:a5:35:71:c2:3c:0a:e8:c5:bd:67:
75:9a:da:f2:55:d4:05:ca:25:9c:1e:50:8e:57:db:
e8:25:49:84:72:bc:75:14:fc:3c:8f:cb:5a:b3:2f:
96:16:ab:15:36:89:9b:e2:e9:9c:0d:b7:a8:83:dd:
dd:76:70:4e:0c:29:00:fc:8d:dd:cd:a3:9c:48:e3:
56:5b:a9:2f:30:d9:7e:73:7b:03:92:58:d2:d0:64:
ca:c0:78:56:95:24:40:e7:24:d9:9d:4d:00:7a:af:
27:43:a7:ed:4f:35:b2:23:96:38:51:c7:39:21:86:
aa:84:07:65:b1:a0:c8:b4:55:a1:43:04:a9:f1:c6:
ae:e4:53:e9:01:2e:94:5a:32:74:8f:a3:e5:f2:62:
87:f4:ca:7a:aa:bd:cb:6b:6b:4f:7a:f9:95:74:4d:
8c:ec:0a:cd:a3:48:cc:36:4c:83:1c:50:7f:87:3e:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:8E:D6:8D:F7:30:0E:E6:6B:FE:C7:C6:43:4E:24:3E:E7:59:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/740444f8-f815-30a5-bd88-f3b460d8e9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:a1:91:df:a8:81:f7:2b:7a:d8:3f:08:0d:74:96:04:88:b6:
78:0f:30:50:66:3e:4d:9a:55:23:42:ad:24:bf:f7:28:34:7f:
a6:94:df:3b:78:92:8d:2d:81:f2:f6:a0:f9:69:74:9e:a2:5f:
34:35:a5:9a:98:03:46:b3:3a:19:84:e4:cd:ef:1c:f1:ae:8c:
3c:0f:5b:5c:77:f1:7b:3f:91:0d:30:88:6b:71:25:b7:38:1c:
27:67:8b:29:ae:a9:37:b6:59:78:f0:10:e7:95:d1:b4:f8:4b:
41:4c:85:a7:35:34:d3:7f:6a:10:c7:b9:a0:a6:43:b8:cd:14:
73:06:88:3e:64:da:1d:25:2d:30:b1:e2:11:78:16:22:b8:bb:
e6:31:25:64:14:e3:1c:4e:b1:74:99:72:40:1f:b7:10:c9:5c:
ee:96:7c:27:31:71:7b:5a:7b:39:38:1a:4e:96:93:a6:41:1c:
9d:03:e4:bd:93:64:50:d4:f8:7f:6c:b3:e2:8d:a1:c6:0a:0c:
95:ec:7e:b4:f6:56:61:84:58:ff:fe:97:29:93:73:15:c5:93:
e1:2e:45:69:7f:c8:c7:5f:12:bc:fd:f2:62:0d:89:bf:dc:7e:
75:fd:ee:5e:03:46:fb:08:3a:32:3f:cf:08:ac:a6:84:ee:32:
a1:67:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:33 2025 by rpki-client