Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/009c2e16-53fc-354b-a121-0b79b8ac599a.roa
File: 009c2e16-53fc-354b-a121-0b79b8ac599a.roa (raw, json)
Hash identifier: 5ipFmLmEqA/nCyfx8WHW2N8fG38YI4ffVwFHCyE3D8c=
Subject key identifier: C9:09:EF:D0:3C:47:C2:68:37:45:8B:40:56:F3:3B:98:7B:12:A8:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C43E542818D7AC7602100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/009c2e16-53fc-354b-a121-0b79b8ac599a.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 24.118.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:43:e5:42:81:8d:7a:c7:60:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d78c1796-9028-493b-9e7f-3e3db9d956ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:b7:26:62:14:95:af:d4:23:a2:7a:39:2d:
4b:ec:0d:c7:e1:8b:7e:b8:d9:c1:2c:e5:95:b5:13:
54:6f:4b:c3:5f:72:2f:4d:8f:82:c9:e5:d6:6b:bb:
ab:47:c1:2e:7d:98:69:85:f5:cb:f7:25:fb:12:11:
a0:7a:6c:62:c7:7b:37:1d:ea:4d:f5:94:1e:18:b4:
55:cc:08:e3:60:1f:ce:c8:9a:33:32:a2:21:2e:4e:
60:da:18:73:92:9c:ae:e5:bf:cb:49:0b:d3:13:24:
ae:68:dd:63:da:6d:14:31:98:8a:af:91:20:e6:09:
fe:0a:c0:f9:72:29:46:a5:ec:7e:c4:86:ae:ed:57:
3b:4a:63:7f:7d:e4:26:5b:c7:f1:63:95:a3:f8:98:
47:dd:51:9e:5f:f3:5c:1e:0c:2d:a8:35:68:c3:d6:
24:86:14:3c:e4:63:d2:a9:b7:d2:50:96:3c:0c:41:
ad:81:d1:71:e3:6d:38:0b:41:0b:03:21:84:db:29:
4d:39:3f:85:59:02:e8:af:06:f5:b2:f0:75:a5:28:
d3:37:8c:38:38:10:00:6c:be:ca:2b:b2:c5:00:ac:
0e:a5:26:47:1d:c4:4a:4e:40:24:ff:a7:2e:f0:4e:
1f:5c:5a:24:48:8c:97:c4:e0:d3:33:1c:11:4a:c4:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:EF:D0:3C:47:C2:68:37:45:8B:40:56:F3:3B:98:7B:12:A8:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/009c2e16-53fc-354b-a121-0b79b8ac599a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.118.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:06:37:55:73:6f:01:38:01:ba:e1:d0:52:81:4c:ae:df:37:
3e:51:a7:8e:90:20:db:17:e1:b8:ae:24:03:9a:d6:2d:40:bf:
0e:63:28:92:9c:d6:5b:c2:fa:9b:de:3a:b1:a0:c7:b4:47:1b:
c6:79:a5:97:b6:b8:47:09:1b:11:e3:7d:33:81:de:f7:60:d7:
c5:c8:0e:bd:a5:0e:bc:b6:89:fb:90:cf:88:c6:00:ee:42:8d:
ad:b6:91:c1:01:17:a9:fc:de:a2:7a:c2:a0:73:4a:89:0b:36:
30:d8:59:23:3a:7d:3f:c6:73:dc:c5:78:72:e8:b7:c2:65:b9:
7d:f8:4a:ed:ba:24:e2:1e:63:50:c0:36:48:1b:da:fc:e8:7f:
0f:2a:a7:9e:35:75:16:6d:d6:e9:e0:73:cf:22:c9:7f:59:3b:
b3:52:c9:a9:12:0a:7e:ef:89:6f:37:73:b3:97:e6:0f:dc:40:
2e:6c:d7:be:72:39:4d:1f:d7:fc:9b:82:95:0a:84:78:d3:21:
2c:49:1d:1a:23:fc:6a:7b:02:d2:0c:fe:8b:0e:e9:54:02:54:
90:69:67:9f:20:fc:f1:0e:0c:37:54:33:f4:cb:60:9c:7f:8f:
b1:d3:fb:78:cd:ff:35:5e:8c:ae:f0:cc:22:9e:7f:96:90:97:
36:c8:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:36 2025 by rpki-client