Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d6a2dda-1ac0-3954-b9be-973ab1687f4b.roa
File: 3d6a2dda-1ac0-3954-b9be-973ab1687f4b.roa (raw, json)
Hash identifier: 7wsgNIMm/4JIk5Jc3GJJPP2uQw8t+tvYg7fsdj2JMqo=
Subject key identifier: A0:94:44:27:86:0C:63:68:C6:BC:6B:4E:8E:33:3B:09:2D:9D:1A:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0BAAE641BF0D7411F2FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d6a2dda-1ac0-3954-b9be-973ab1687f4b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.12.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:ba:ae:64:1b:f0:d7:41:1f:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ed320a76-a2d6-448d-ae4d-31a2afb08169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:d3:7f:f4:4c:5f:36:a8:79:bf:6e:d3:5b:
30:a5:da:28:8e:35:64:79:19:28:97:d4:b1:6c:37:
63:ec:d3:ae:c1:19:40:2c:3c:dc:a4:ce:03:0a:02:
58:3a:f4:1e:a1:bf:64:f6:71:29:fa:57:39:63:2c:
cd:bf:86:d1:ef:bd:f6:b4:c4:32:6a:a3:d9:d7:d7:
f4:02:e2:87:43:fa:22:14:5e:67:18:e6:73:a1:a9:
c3:52:4f:ca:b5:f3:6d:d7:76:af:36:cb:2f:5a:e0:
28:5a:e2:2e:02:94:a3:7e:f2:90:ae:d9:b0:7b:76:
61:48:af:d7:e3:03:2f:85:6d:2c:be:c2:da:e8:35:
db:32:2e:ff:d4:a1:be:3e:69:b5:94:ed:0c:c1:53:
8b:51:24:45:68:68:96:b4:47:3c:ab:a5:2b:6e:fd:
f1:3c:52:01:af:52:db:14:0f:19:b9:6d:b3:8b:80:
2f:12:35:33:8d:1e:5e:04:46:66:06:8a:ce:b4:82:
07:93:54:76:f1:6a:25:eb:29:ff:ee:53:6f:4b:2a:
14:bd:31:71:30:6c:1a:9a:20:5e:ab:e9:bb:1a:3d:
21:be:75:f8:65:25:ef:13:56:9b:5f:bd:a9:11:37:
69:cb:5e:c0:fe:d2:95:f4:e9:70:29:2a:93:70:78:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:44:27:86:0C:63:68:C6:BC:6B:4E:8E:33:3B:09:2D:9D:1A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d6a2dda-1ac0-3954-b9be-973ab1687f4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:80:c3:4d:90:1d:2a:32:ac:75:9b:f1:02:b8:83:06:9b:ee:
0b:58:e9:3b:82:ce:a3:c9:2b:35:7b:4e:9f:4d:04:bd:0e:75:
73:c6:49:40:23:e1:e8:97:22:68:32:6a:8b:95:14:55:4c:e0:
99:94:49:d7:f6:53:01:ef:bc:ea:62:86:6b:da:77:9b:d4:8c:
95:70:b5:ff:4b:39:12:a9:18:77:b0:51:cc:43:b7:29:20:82:
fb:5d:d6:8a:ae:21:36:15:cf:53:22:a1:2e:ad:e1:9e:6f:73:
16:32:80:30:a1:85:14:a1:b3:07:04:3d:bd:8f:b4:25:5d:ca:
13:6e:d6:5e:04:b4:06:55:8b:6c:38:76:f2:c4:5b:12:99:18:
ea:67:34:a2:7d:b6:6e:fc:39:35:ce:a4:b9:60:0c:e2:40:cb:
01:53:de:0b:ca:91:4a:d3:02:ed:59:49:c7:0a:4e:1e:76:42:
16:99:30:fd:df:57:27:4b:ac:50:a7:31:a1:19:be:a3:ac:be:
f4:be:0e:51:e6:9a:2e:83:98:88:1d:e0:b8:f5:09:dc:c8:ab:
16:9a:ff:d7:11:89:51:09:f9:c4:36:3a:b0:c4:8e:2b:dd:cf:
d0:5f:1b:e7:96:f0:7e:25:1d:6a:bd:b0:5f:29:3a:69:8c:37:
14:9c:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:01 2025 by rpki-client