Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a581bd-9114-3517-b65d-b0409bce1f68.roa
File: 22a581bd-9114-3517-b65d-b0409bce1f68.roa (raw, json)
Hash identifier: xFkNizg8aLVclja76zmT5Vw5GxknEUZbJshgxKmJvuE=
Subject key identifier: AE:2B:21:F8:8E:1D:A5:99:E8:91:6C:39:AD:EE:67:40:4B:82:92:71
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8D2023FFA65190553A2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a581bd-9114-3517-b65d-b0409bce1f68.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 24.127.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:d2:02:3f:fa:65:19:05:53:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3803bb74-34f0-4896-93d2-c9239ea0cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:82:f0:f1:0e:b2:f9:c0:02:ef:e3:bb:1c:
47:a0:05:21:5d:39:c6:5d:05:f1:04:be:ea:21:9d:
c6:c5:a2:e6:65:63:de:ce:86:90:c0:64:3e:f7:05:
a6:83:a0:25:30:9e:e2:44:f9:25:a4:28:0a:8e:a5:
99:4d:b1:82:27:f7:64:4e:a6:30:2e:4c:d9:61:59:
35:48:07:92:1e:d1:ac:7b:c9:31:34:0e:c2:64:94:
ef:7d:39:7f:3b:af:b8:f4:ac:d0:4c:6d:46:23:24:
ce:9f:49:fd:f9:2e:ea:60:21:04:8d:f8:a5:d0:ad:
13:07:76:6d:a3:3c:cc:7e:b1:74:41:61:ee:d4:4b:
44:4e:fe:cc:6b:b4:d9:da:7e:42:9f:88:03:2f:4a:
84:be:11:bd:f7:d4:86:10:12:6c:b6:5b:b7:07:25:
7e:e0:b9:1f:c2:1b:31:c3:d3:a1:2a:bb:c5:a2:16:
23:3f:e9:2f:6e:d4:15:3e:c2:58:77:a1:dd:de:9c:
e0:8e:3a:af:3d:07:92:50:71:25:15:b6:0b:32:71:
79:d8:57:f4:3f:3f:3a:d8:d1:3f:84:64:2d:4d:5d:
0f:6c:01:ae:cb:4f:39:ff:5d:db:cb:6a:e6:fa:bf:
89:7d:1b:b8:ce:da:c5:53:cf:d4:44:63:8a:59:68:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:21:F8:8E:1D:A5:99:E8:91:6C:39:AD:EE:67:40:4B:82:92:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a581bd-9114-3517-b65d-b0409bce1f68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.127.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e9:f8:28:fe:9c:4f:51:b3:dd:5b:a8:a5:ec:b7:6d:75:3a:
70:8f:b5:d4:34:65:dd:27:54:e3:05:cd:62:19:25:88:ed:79:
28:52:e8:76:08:19:f8:ad:47:c5:d4:2a:f3:a6:30:60:90:16:
15:f7:ee:7e:32:a1:09:71:44:6a:e6:e1:61:fa:58:b9:37:b3:
7e:63:d4:de:40:4b:d5:13:97:fe:c0:f9:3d:00:71:04:d1:10:
6c:dd:42:9a:4d:ea:91:bc:4d:23:bd:fc:6e:95:9c:79:7e:b3:
28:07:d1:4a:6a:c3:35:cc:95:c3:ca:91:83:e0:52:15:05:45:
f1:4a:2d:98:b7:80:51:46:6e:8c:8a:89:32:b1:17:5c:c2:48:
34:f3:1d:9f:07:1c:c0:b4:2a:c3:43:95:f9:d2:66:4e:3a:1a:
31:2d:5a:bb:fe:f1:f2:18:0f:2e:83:07:bd:19:a2:41:58:e3:
a6:76:a4:6f:9d:1b:1c:70:3e:8c:32:59:72:bc:4f:53:c5:21:
b3:5b:f7:8b:ff:46:b0:53:ce:3e:72:74:55:e8:88:68:09:64:
50:c4:a8:4c:f2:aa:76:9e:ed:c3:2c:08:b5:77:3c:cb:62:e3:
83:e1:bb:21:74:78:c0:04:1c:1a:9b:92:c5:e4:fd:1a:37:01:
58:cc:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:01 2025 by rpki-client