Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c2dccd1-216e-30d2-be5d-cb8c8fe26fea.roa
File: 3c2dccd1-216e-30d2-be5d-cb8c8fe26fea.roa (raw, json)
Hash identifier: S7/YdPyT5YePgfOsTbNPogFdRk9l89GJqjLpbvglEYE=
Subject key identifier: A9:B6:B7:6A:21:29:5A:70:F1:2B:1B:3D:AA:C6:30:A0:FB:C3:B4:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C2C87DAA711876100B000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c2dccd1-216e-30d2-be5d-cb8c8fe26fea.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.99.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:2c:87:da:a7:11:87:61:00:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=ecf84242-f0d9-4758-8fe5-73ddf923316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:2e:5e:4a:92:4f:f6:94:4e:f1:ab:99:35:
8e:6a:e3:21:50:13:dc:a3:d6:8c:6f:15:66:5c:f0:
30:dc:69:d2:e1:36:23:5a:ca:9b:e8:b9:f1:9f:33:
15:d5:50:37:d3:64:28:15:4a:ba:38:fb:de:8b:5e:
42:1b:40:d1:09:49:bc:fc:52:61:a2:93:7c:69:1f:
6d:ea:d9:3f:52:54:a6:00:38:b4:17:b9:5a:6e:96:
d5:92:11:65:58:ca:c2:65:b2:66:9d:7d:21:6a:94:
b2:cf:cc:a5:50:72:d0:c6:3a:d1:ce:69:7c:d7:df:
a0:34:f7:e1:77:99:50:09:bf:0f:04:2c:e3:c5:54:
4a:4c:b4:e2:d2:c0:36:25:d2:7c:c4:2a:8e:85:dd:
a7:9a:00:68:8c:c1:d6:cf:d0:6e:be:c7:d9:01:99:
c7:f7:7a:ea:fe:54:f5:c9:1d:96:4d:17:56:a1:55:
32:23:03:6f:45:54:51:9e:ae:bb:50:64:30:d1:7b:
32:9b:47:a4:eb:a3:ec:81:df:3e:d5:28:1c:41:34:
5a:48:c2:21:fc:7f:4a:31:f9:90:81:91:fd:11:c9:
83:a9:8a:2b:1f:82:1c:9c:5a:4c:bc:6a:7e:58:30:
7f:8b:4b:e5:ba:0f:6c:f8:42:fe:31:2c:37:43:a6:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:B7:6A:21:29:5A:70:F1:2B:1B:3D:AA:C6:30:A0:FB:C3:B4:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c2dccd1-216e-30d2-be5d-cb8c8fe26fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.99.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b4:e0:e8:b7:26:3f:db:a9:d9:37:60:cc:91:86:71:72:ac:
d5:79:55:1c:8e:6d:33:f6:f4:86:e3:9d:25:62:f7:56:e4:23:
d2:b2:69:06:c2:e6:9e:68:2a:15:29:53:d8:7b:63:b2:e6:fc:
37:4d:d6:b4:8f:6d:9b:8b:41:91:de:be:30:12:19:f6:cb:e0:
34:e8:3e:2b:c6:e4:d8:98:d0:e1:92:1c:c5:81:9f:0c:47:39:
a6:24:0e:63:e3:25:7f:30:25:e6:fc:f2:c2:bf:35:0e:60:b6:
3f:d8:c6:c7:b2:dd:54:a2:ee:ae:03:5d:d6:7d:cc:22:a4:df:
66:bc:37:da:05:10:a4:88:1b:90:23:61:9d:8c:f5:5f:c7:86:
5b:a5:2b:16:df:95:cf:5d:e0:af:39:0c:dd:5c:4e:0c:a3:c3:
08:28:c5:96:a7:1a:1f:21:39:03:52:34:0f:94:89:20:a6:3a:
87:5f:f5:9b:5e:09:0c:65:cf:f7:30:3f:c5:13:e7:1c:cf:84:
b0:30:c2:8e:5a:0c:72:1b:a0:f5:cf:fc:fd:d2:91:13:ba:73:
0a:ed:6c:6f:fe:a7:66:5b:ce:5e:58:b5:6b:18:7c:52:bb:b8:
b5:80:d0:a3:70:a4:69:54:80:71:6d:17:cd:9a:6b:0f:64:30:
05:12:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:34 2025 by rpki-client