Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0109a66a-e199-37e0-aa08-88de39d16214.roa
File: 0109a66a-e199-37e0-aa08-88de39d16214.roa (raw, json)
Hash identifier: 5/LJCzW7lCF1ZZ2ixgdCYdhQ7bwCv17bwtJCy1v9KUA=
Subject key identifier: EB:3A:6F:F2:97:7B:98:A9:1B:67:32:2C:D6:A5:74:CF:00:A1:2A:B3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1725CC995D68911C19080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0109a66a-e199-37e0-aa08-88de39d16214.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 24.5.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:72:5c:c9:95:d6:89:11:c1:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cb9ad922-8c4c-4c2a-8925-3dc34553fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:69:94:7a:cb:9c:02:11:f0:3f:07:cb:96:
be:7b:74:26:0e:eb:8e:8c:11:aa:fb:cc:b1:e1:c1:
34:61:7b:0f:6c:ce:20:71:e8:00:f8:37:36:ef:ae:
d6:aa:f2:9b:31:df:2e:5d:6a:51:61:e3:86:73:b4:
aa:18:b0:0d:da:2e:bf:4b:f4:06:ce:fd:9b:90:43:
59:73:ba:77:9f:a4:9f:44:93:65:e9:2e:cc:21:c9:
a6:5a:fa:4d:de:10:e7:d0:bc:33:bf:dd:a1:f0:dd:
87:e4:32:b7:85:64:e4:ae:27:e3:bf:e4:5e:96:86:
5c:b4:24:7b:05:18:f7:ec:a3:49:70:61:73:48:58:
11:f4:98:3a:56:ca:34:cb:f9:41:d0:4b:b1:89:c5:
19:c4:89:e7:0e:43:2c:99:f0:97:03:df:ad:3a:cb:
ab:34:a6:e7:d5:a8:21:cc:09:d4:f5:d7:bd:43:ac:
6c:d8:42:b1:53:21:a1:75:0a:bc:30:02:69:c9:77:
69:38:5d:25:37:d0:6d:a8:30:0a:f6:3d:c5:73:99:
87:8e:5f:74:f7:56:9e:37:fe:19:0a:c4:21:25:98:
3d:88:37:a5:3f:81:29:1c:ce:f8:84:ff:8a:30:2f:
e3:1e:80:73:a4:ff:fa:16:a0:6f:29:0b:a3:25:74:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:6F:F2:97:7B:98:A9:1B:67:32:2C:D6:A5:74:CF:00:A1:2A:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0109a66a-e199-37e0-aa08-88de39d16214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.5.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:48:36:d5:d7:3a:d9:97:09:8a:3c:d8:98:7c:ba:92:6b:1c:
d7:a7:b9:5c:e8:33:5c:66:1c:03:c5:df:04:aa:67:e8:67:65:
9a:ca:ef:33:c4:f6:03:23:9a:08:04:5a:32:c6:1d:48:8b:9a:
91:01:eb:ed:3d:0a:c1:40:71:30:7f:ec:77:87:70:11:0d:c1:
93:06:39:c5:61:48:f8:3a:80:93:e8:ab:cf:11:1e:ec:5f:ed:
ef:cd:2e:83:09:03:06:46:d4:9a:55:74:79:51:46:79:f6:08:
75:6e:6a:44:04:cd:80:aa:42:b4:7b:4a:f3:4b:7a:3e:c5:02:
83:27:01:9a:23:52:cd:a0:6c:76:be:6e:08:0b:5f:10:c2:8b:
06:00:63:28:ae:42:62:84:00:a4:4d:c3:77:1d:c9:a3:e9:28:
79:37:d9:9a:16:24:a8:13:4c:91:90:6e:45:45:ac:5c:a1:74:
3e:4f:ee:ec:8f:9a:5c:5d:a1:93:87:a7:60:24:73:29:62:83:
0f:a5:47:72:1a:5c:37:a2:17:de:2e:a9:e6:81:24:03:ca:fe:
09:89:e2:38:b9:d6:f4:10:6f:11:ee:f5:30:58:16:6f:49:6a:
73:94:6b:62:44:34:04:f6:10:8e:9a:78:13:4f:04:29:9a:e6:
e3:54:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:11 2025 by rpki-client