Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09450c9a-88ad-3a31-aebf-9226abff3bb1.roa
File: 09450c9a-88ad-3a31-aebf-9226abff3bb1.roa (raw, json)
Hash identifier: L4fN8EpTCDpBNtHl7xgpMJk5Xt0ipK5FGQLqH72/iIQ=
Subject key identifier: 7B:BC:09:24:97:7D:0B:61:33:7E:2F:3D:04:D1:51:65:E1:06:5B:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0C09878DD481605AE8DB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09450c9a-88ad-3a31-aebf-9226abff3bb1.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.15.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:c0:98:78:dd:48:16:05:ae:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=faa9eb7a-e72f-4465-978d-15c3b4649ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:f8:dc:0c:e5:86:3c:6a:84:73:d1:b9:e5:
26:ee:1d:ae:e8:60:f5:88:33:46:91:d3:f4:31:b8:
dc:56:36:72:1f:ab:bd:46:a0:72:41:ef:85:f5:c0:
fe:62:40:17:e8:55:32:a5:d5:20:b2:e7:47:c2:be:
8a:49:9c:79:42:09:eb:40:f4:95:ee:e3:29:0f:29:
c6:25:d4:df:6a:4b:73:43:8d:f6:be:91:5b:37:b2:
91:8b:c8:aa:2e:46:aa:2d:c6:37:79:9c:70:aa:6a:
0a:5c:87:06:f0:99:67:e8:69:85:ea:53:f5:5c:13:
da:20:db:65:61:6a:00:ff:cb:ef:70:23:7e:94:42:
87:a6:6b:ac:07:37:c6:4f:db:1c:1b:10:85:2f:1b:
09:5c:64:94:fe:c8:cd:ae:ef:11:df:b9:e2:2f:0b:
b4:ad:fe:68:2c:ca:5a:39:d1:22:43:80:2d:57:57:
09:a9:28:4b:aa:7a:66:a9:7c:fe:7b:ec:b2:69:d6:
9d:ce:bc:6a:6c:75:ca:f1:55:32:50:eb:d5:30:26:
41:bb:76:e1:ea:2a:3a:a2:4d:d7:84:3c:41:6b:38:
f2:76:97:e1:6e:14:10:42:09:de:3c:86:e0:62:c0:
e3:11:93:db:f8:30:7c:76:e0:8b:50:ff:10:4f:c7:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:09:24:97:7D:0B:61:33:7E:2F:3D:04:D1:51:65:E1:06:5B:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09450c9a-88ad-3a31-aebf-9226abff3bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.15.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d9:e3:ab:35:7c:ae:05:52:63:4e:e4:06:70:29:c7:e8:49:
cb:dd:2b:0a:81:d3:e7:8a:c1:c0:ec:a5:b4:c0:a0:97:72:cd:
35:81:ff:49:96:46:78:99:83:0b:95:aa:88:fe:4c:02:13:07:
6c:60:1c:c7:83:68:b9:99:8b:ad:25:8f:e9:57:12:0b:39:9f:
72:6d:13:56:fc:59:14:74:0c:15:36:52:40:fd:8a:26:43:eb:
54:14:03:e9:71:62:bb:90:1f:c2:1d:e9:8e:7e:cb:ba:7c:25:
e9:7e:e3:34:63:fd:86:22:86:bc:34:e4:9b:ec:21:58:5c:b0:
b3:84:6c:0e:8e:2b:72:a4:8b:1a:49:10:f0:7f:c7:42:23:d9:
d8:7d:47:28:c9:b3:d5:b5:4a:a1:11:96:94:af:e7:42:86:ae:
00:58:31:d7:5c:02:d5:03:2b:d2:58:34:7e:9b:ef:f7:e6:28:
8c:53:7e:f6:ee:af:09:44:3e:d7:dd:db:33:c1:1d:ea:cc:11:
23:9f:80:54:07:37:7c:18:aa:9c:5d:77:c9:26:63:bf:dc:6d:
c2:1a:bb:13:0c:54:5b:18:5a:19:4b:57:e9:33:d6:d3:97:b7:
97:a3:9b:84:99:9b:94:30:e3:c9:b8:39:a2:d0:74:74:e2:b3:
f2:f0:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:01 2025 by rpki-client