Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/350bc441-0644-319e-bcca-cac9648d8294.roa
File: 350bc441-0644-319e-bcca-cac9648d8294.roa (raw, json)
Hash identifier: 1heLMuXHJkpb/nlhfOINgEGYrKhc06GUbaObC7DoUw8=
Subject key identifier: A1:F2:AA:3E:B6:32:32:35:2B:4C:24:9A:8D:E6:52:4E:2A:40:C1:85
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F855FAD2B80E0D95154A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/350bc441-0644-319e-bcca-cac9648d8294.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.34.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:55:fa:d2:b8:0e:0d:95:15:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=08b25b7b-6562-4674-94f0-2535b9420cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:41:1a:54:9f:12:cf:47:40:eb:69:41:98:
35:ca:f9:64:aa:82:ff:04:fd:c0:32:95:95:81:02:
04:65:12:eb:c2:3f:a1:73:e6:12:97:eb:7e:a0:2f:
87:44:6f:cb:17:75:fe:f5:44:cd:c5:0f:0d:cb:81:
13:b8:5a:6e:55:cf:0b:85:0a:a7:a9:ac:b8:c5:7a:
b7:9a:3f:8d:6e:1d:ff:c4:7d:1f:a0:0e:41:58:3c:
6b:0a:e2:8a:a3:4b:e5:79:33:64:a0:fb:0b:95:2e:
bf:56:05:93:6e:cf:46:aa:cf:51:c5:d9:39:18:3b:
69:56:1c:d1:4a:3c:0a:d5:f4:3f:36:dc:a3:40:2c:
b0:da:b1:34:49:33:ee:06:5e:ff:64:bd:76:31:e8:
4d:25:62:10:fc:b9:49:5d:3c:42:0d:70:34:09:5c:
c1:24:59:3b:07:f2:9c:0d:03:9f:74:f5:0d:db:96:
8d:25:22:e1:91:67:dd:1e:c1:65:fe:0f:0b:a7:fe:
ab:ff:06:3b:c0:12:89:da:47:bb:27:e5:b4:78:e3:
4b:b7:c5:c4:45:1f:37:64:65:e6:69:fb:77:06:8a:
33:74:53:62:90:14:c4:f9:02:df:aa:1e:72:bc:99:
76:ac:f1:62:43:66:21:f3:11:c3:7b:35:37:b3:e7:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:AA:3E:B6:32:32:35:2B:4C:24:9A:8D:E6:52:4E:2A:40:C1:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/350bc441-0644-319e-bcca-cac9648d8294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.34.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:01:9c:a0:ca:0a:54:9b:75:df:14:68:94:75:2e:94:59:2f:
2e:07:ce:93:3d:2f:8c:6f:92:65:fc:6f:fc:f9:39:a1:bb:d8:
01:10:dd:b1:ca:1e:a2:37:a1:3b:1c:fe:23:eb:97:e8:69:a4:
7b:75:fa:e9:7b:b0:f9:37:cf:8d:8c:39:3e:53:d0:7a:bd:b8:
6c:03:d4:9b:00:1e:e6:a5:98:23:53:9f:43:4f:1f:9a:7d:fc:
ef:f8:98:e3:66:91:85:5d:c5:2c:58:58:fd:33:a0:57:19:10:
b3:fe:b8:c6:6e:6d:52:9b:85:66:c3:39:07:86:85:a2:69:ea:
c7:6f:cf:53:f8:49:35:ab:76:43:48:2e:c5:4a:33:01:40:a2:
a9:95:8f:b8:d6:f3:8b:d4:07:de:a9:02:86:0a:cb:71:f6:6e:
43:b2:5c:db:ab:31:87:fa:4e:6f:a4:67:13:f8:02:8b:bf:ba:
d1:01:c7:33:08:0c:b8:e7:7b:27:77:9e:22:1a:93:99:72:5d:
37:45:42:c6:eb:7a:25:d0:30:1e:67:c1:e9:bc:cc:50:9e:2d:
e8:92:d0:fc:d1:4e:2d:02:28:28:03:a2:ab:8c:57:5d:af:9f:
74:63:0b:ea:25:7c:19:15:0a:f1:ac:f5:8f:83:a6:79:92:7d:
64:53:e4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:14 2025 by rpki-client