Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30f2a12a-9409-3dca-b2f4-1d25737e0f3a.roa
File: 30f2a12a-9409-3dca-b2f4-1d25737e0f3a.roa (raw, json)
Hash identifier: rNOgfYSjr5BkXYK/ttBrySN6Ew+mg80ZmlLlA+6Rssw=
Subject key identifier: 45:6D:53:60:61:8F:F4:00:14:6B:F6:D4:E5:38:3F:A9:0E:1F:D0:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8545B9409F95673DB1120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30f2a12a-9409-3dca-b2f4-1d25737e0f3a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.218.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:54:5b:94:09:f9:56:73:db:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=43c003e4-6c73-40f3-8e17-dce5674f83ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:76:b2:99:54:a2:82:f0:ba:5e:6d:07:36:
6b:3c:7d:1e:e2:35:a6:74:b9:24:38:13:e3:24:93:
7f:49:5a:15:48:ca:65:24:8a:c5:d4:4e:1e:91:11:
aa:d9:c1:33:7c:ed:92:b7:b0:0a:c2:31:3a:a6:7b:
f3:f7:30:b1:7b:c1:1b:6e:9f:b6:a7:d7:14:c1:64:
fc:b3:c1:51:2e:2a:25:c3:2e:92:ed:a7:bd:e8:c7:
e9:2d:12:a2:46:1c:e2:9e:04:e0:d0:a3:3f:8c:ee:
89:56:f5:4f:9e:05:cf:6a:2b:78:c1:1d:ac:b8:27:
86:29:d7:f8:64:8d:bb:b5:d4:7d:a8:71:b5:de:c4:
bc:2c:77:c8:fb:2a:17:d3:5a:bf:fc:49:06:0c:20:
a4:df:df:be:b2:a7:7d:f0:8f:e4:dc:62:b6:f1:4b:
b3:59:1c:77:25:2a:5c:a8:88:f2:ae:e1:69:72:04:
48:8b:f5:5a:b8:ec:c2:f3:89:13:68:98:61:dd:70:
b9:57:47:c6:f4:e7:bd:25:ce:3b:3a:f5:ac:b2:c0:
85:f9:26:7a:2c:97:af:9d:83:00:e1:fb:eb:01:c5:
f0:f0:79:bf:bf:ab:4a:a4:fa:c8:30:16:c8:52:b4:
44:6f:5a:73:78:f3:21:22:9b:32:75:fb:a5:8c:36:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:53:60:61:8F:F4:00:14:6B:F6:D4:E5:38:3F:A9:0E:1F:D0:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30f2a12a-9409-3dca-b2f4-1d25737e0f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.218.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:46:12:72:62:e6:0b:ea:d9:51:f1:cf:28:d1:0b:75:24:c9:
72:d0:8a:24:82:e5:86:df:84:a2:b5:47:0c:a4:2c:16:54:8c:
d6:83:ea:8b:b6:c8:9b:39:cf:5e:c3:9b:37:ef:71:8d:fe:c8:
9e:6b:99:5a:f6:84:13:7a:a1:b5:35:b1:ad:12:0c:90:61:c7:
2e:83:c9:ec:0d:f0:2f:14:ad:ab:e9:a4:2e:b9:1b:14:80:55:
6e:85:ae:f3:71:46:aa:b0:d2:70:be:35:d7:78:83:6f:21:0a:
91:c2:a8:dd:99:ca:89:59:2c:65:e3:90:25:ac:70:d2:6f:c3:
f2:25:be:55:a3:3a:69:e8:be:a0:7a:f5:61:6b:2d:c8:52:f7:
cd:f8:cf:a4:c7:bb:04:c7:25:f0:3e:c6:76:a8:ed:a4:2f:3f:
ea:1f:ec:c6:87:da:29:5a:38:29:54:5e:46:8f:99:d7:49:c0:
d2:73:08:50:d3:74:11:c9:59:5f:20:86:a6:14:a1:d0:52:1b:
95:ad:0d:8b:b6:d1:b4:9e:56:31:e7:d8:60:a6:fa:aa:b0:07:
8d:d9:c9:d0:a1:52:72:8d:cc:8d:8a:35:d0:66:62:df:a4:ab:
88:1b:a0:e6:85:dc:dd:e0:56:07:5f:e3:6e:40:1f:aa:01:7b:
a0:9d:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:54:26 2025 by rpki-client