Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/257bdf89-8276-3cb3-b429-2ca7ebd23141.roa
File: 257bdf89-8276-3cb3-b429-2ca7ebd23141.roa (raw, json)
Hash identifier: Z5Sml2Drn6p3vaomNriz8IfACG9Z+m0E03QJqDzY0FU=
Subject key identifier: FC:CD:19:AD:D4:07:48:39:4E:B0:72:E6:CB:B1:1C:3D:47:84:B1:AA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6EF496B65FD2F8FB4A900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/257bdf89-8276-3cb3-b429-2ca7ebd23141.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.34.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:ef:49:6b:65:fd:2f:8f:b4:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=523606a4-b275-40b6-af0e-b9b2c86ba9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:61:19:c3:00:17:22:92:6c:2e:5f:43:99:
c5:84:e2:3a:09:fc:1a:48:f3:dd:8f:5e:c6:e1:cc:
9f:b1:7a:04:18:52:85:71:26:44:06:73:8f:7b:66:
8e:62:b8:df:d2:b3:20:53:04:c9:a1:87:b9:fd:c8:
e3:64:84:9f:90:da:91:27:ef:9a:f8:27:57:59:0e:
50:71:62:e2:61:b7:a4:af:b1:e3:ac:d2:3f:30:dc:
2f:01:01:9d:d8:c8:e4:0b:0f:60:2e:23:28:64:72:
59:58:c3:b2:ef:c5:0c:b0:c7:79:4f:5d:be:be:e6:
fa:ec:a1:8c:37:f4:de:02:60:73:ce:98:c6:bb:57:
a0:f2:60:ee:f2:1e:27:a2:c0:ec:60:8f:6c:27:4a:
8e:0e:54:28:db:41:d4:2f:75:86:78:0b:c6:f2:27:
3f:cd:f3:df:da:c8:34:00:5d:7d:6e:d0:58:46:41:
30:89:d8:e7:12:67:00:da:44:0e:c1:57:6a:1a:d1:
03:03:06:ba:ea:c0:6a:f2:40:fc:37:da:31:30:37:
8d:57:95:a9:cd:6c:bc:c7:69:7e:e7:ed:e7:ea:35:
e9:0c:95:19:c5:54:c4:57:ce:43:01:62:99:ab:97:
64:48:5b:6d:60:04:b6:34:10:f6:bb:2b:eb:5b:a0:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:19:AD:D4:07:48:39:4E:B0:72:E6:CB:B1:1C:3D:47:84:B1:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/257bdf89-8276-3cb3-b429-2ca7ebd23141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.34.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:7f:35:96:06:76:44:81:b4:bc:b9:e7:47:f2:d2:41:96:d9:
96:7a:6f:61:3a:5c:25:e5:82:cb:ad:36:7b:cf:38:f6:d7:44:
f0:9f:99:59:08:a2:ac:34:4e:98:2b:8b:ae:f0:46:08:a2:5a:
56:b0:e4:cb:14:05:ab:85:45:f4:2a:6a:ce:c2:71:58:48:fd:
f6:64:39:04:39:5d:ff:2f:b6:0a:22:54:2d:46:b4:7d:5d:05:
9f:8f:2a:be:3a:25:1e:51:6c:8d:a6:de:0a:74:10:25:2f:19:
c5:78:89:9b:5a:7a:16:2f:5a:fa:dc:5e:d6:43:d4:e6:11:9d:
42:7d:91:be:95:f6:d8:0a:ed:8e:c0:31:f7:18:d9:5e:60:46:
ec:f7:f5:07:30:9f:d3:50:27:f3:c0:51:95:34:96:2f:83:a5:
22:cc:13:30:2d:1a:dc:d9:c1:0e:c9:33:9a:23:e1:88:40:5f:
6b:11:2c:bc:b6:f1:fa:07:48:4d:f2:9d:59:ea:50:8a:36:2f:
87:81:8e:45:ca:f3:df:70:f5:ef:bb:d2:0b:21:6d:70:c8:65:
3f:cc:c3:79:79:72:3a:82:11:a9:32:57:33:a3:61:ed:56:ce:
4b:4a:8f:85:be:3e:28:58:66:0a:9b:dc:dd:92:84:4a:20:b1:
c3:e2:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:41:37 2025 by rpki-client