Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa
File: 2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa (raw, json)
Hash identifier: tap9/PqXOAuh8CyrIbuDFp9HiyMwmwNBPiAKt+PJXQ4=
Subject key identifier: 80:54:6D:D5:7A:04:86:F7:92:B0:A9:F8:2F:38:7A:63:47:EC:4D:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E2F16829751B9C3C3D300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7922
IP address blocks: 24.30.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:2f:16:82:97:51:b9:c3:c3:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3646a6c6-36af-4015-9f35-ebc50a591955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:f7:c5:bf:99:c0:53:e2:d4:3a:93:e4:d4:
22:87:d9:05:77:8a:6f:b6:c1:c8:66:e8:e4:f6:11:
0c:b2:7b:89:a0:06:32:53:2a:b6:bd:a0:7f:3e:7a:
eb:c8:1e:13:22:04:69:da:65:22:58:5e:2a:38:1a:
5c:c3:68:5b:86:6d:aa:5e:37:29:0f:d2:2f:d2:9d:
f2:64:0a:72:bd:36:ea:c3:84:35:b0:63:90:2d:a9:
ec:2b:0a:c2:76:66:f2:9a:d2:e5:77:72:3a:86:82:
6a:e6:a7:4f:9f:c7:29:c8:a0:25:9d:93:a5:0f:e6:
89:5c:a1:90:c0:57:cd:b6:bc:1f:7e:6c:88:0e:84:
22:88:34:99:94:3d:a6:e7:4c:aa:27:4b:d0:3f:52:
17:78:51:0e:9e:1b:cd:df:7c:55:55:4a:aa:07:e1:
b2:04:da:5f:64:1e:16:da:43:6a:a5:3a:65:7a:64:
85:1c:27:26:27:43:df:23:10:ff:58:01:50:e4:e1:
53:81:63:43:86:2f:e4:91:47:85:8b:85:24:15:d8:
de:d2:db:ef:ca:25:63:99:e5:a2:d7:69:c0:e4:98:
a8:ef:d6:23:85:f0:59:9b:5b:0a:9b:a1:97:26:31:
02:8f:28:61:d0:a3:7d:cc:e2:a7:6a:dc:62:47:f0:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:6D:D5:7A:04:86:F7:92:B0:A9:F8:2F:38:7A:63:47:EC:4D:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.30.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f5:46:c3:68:59:0e:ed:2e:0c:89:8c:56:e6:82:cd:e8:2f:
8c:f2:af:94:16:a8:11:33:08:72:88:68:a9:37:1e:c7:62:a0:
8d:69:d5:96:0a:a0:0f:fb:c6:53:55:50:ba:66:69:aa:aa:e5:
48:cf:78:27:5f:7b:b1:1f:de:4c:1b:4f:cc:5c:23:68:ef:5e:
9d:68:1c:a2:c9:75:66:01:b5:bc:09:03:53:c9:fd:ee:52:9c:
57:db:9a:48:5d:a6:86:ef:8b:61:c1:c8:85:69:de:90:36:9e:
15:a8:50:c2:0a:76:07:b1:9d:fb:4b:65:c5:d7:bf:0f:6b:14:
f7:4c:8c:cf:c4:d4:19:e2:db:19:74:7d:07:06:fc:6c:de:25:
82:cd:cb:97:70:c0:88:ed:81:70:33:1d:87:0c:69:c2:7c:7a:
59:69:ed:49:de:50:1a:14:de:03:91:c1:a4:89:31:7c:aa:80:
c8:a7:9b:17:21:e6:0f:e4:06:b2:67:fd:e7:13:0f:83:a3:9e:
8a:8a:25:2b:4d:1b:bd:e3:69:b5:a4:87:85:ce:e4:ca:0d:2e:
37:17:9d:f0:77:1b:4f:54:1e:55:db:4a:f6:62:d6:f5:0f:01:
6a:94:73:2d:d2:b7:7d:fb:ed:86:1c:15:b3:18:04:80:9b:2e:
e9:59:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:09 2025 by rpki-client