Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42cca488-3eb2-3b71-9221-df9cbe5a5ed1.roa
File: 42cca488-3eb2-3b71-9221-df9cbe5a5ed1.roa (raw, json)
Hash identifier: JZF2NXs4dm9RjSzKFdM00FZGcD4w8A99oD3rHArHvaM=
Subject key identifier: 39:E9:01:29:7E:CA:38:3D:48:FA:60:26:DB:6D:29:7F:14:8F:CE:E6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F82443EF5B6F736F783CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42cca488-3eb2-3b71-9221-df9cbe5a5ed1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 24.22.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:24:43:ef:5b:6f:73:6f:78:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1b79d64d-6e1c-42d9-a77c-f0fdbfb8595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:a3:57:07:63:f6:55:f9:2a:7a:f7:82:89:
6d:b4:21:e0:8f:17:51:28:2f:36:6d:29:78:f4:eb:
be:8b:dd:4c:30:1f:a0:ff:17:68:38:bf:d0:fd:37:
d0:06:b6:07:03:ea:b8:89:5a:4d:ca:9a:8d:99:90:
5b:f3:f0:49:9b:2d:93:54:63:05:7c:51:5c:1a:68:
02:56:43:25:09:f8:af:d6:92:90:29:80:ed:41:72:
c4:3e:25:06:c6:81:63:6a:5c:93:0a:be:7e:5f:45:
d0:47:d7:26:da:f9:c9:f3:43:e6:65:29:8d:e2:63:
dd:52:32:f6:d7:1c:3c:d0:89:0d:44:64:8b:ed:0c:
e8:e9:4f:a8:f9:4b:53:90:57:40:22:54:44:2e:d9:
79:00:e9:2e:7a:6e:00:ce:ab:69:cb:fb:ce:f0:20:
94:a3:65:03:02:3b:bf:d8:8a:22:87:73:5f:d6:aa:
d2:92:08:9f:c0:63:0f:eb:b4:96:c2:40:90:53:60:
0e:9a:18:95:b7:27:ee:a7:39:6a:9c:ad:32:c1:84:
2b:7f:74:67:01:61:c2:93:ab:3e:b3:9e:b0:cf:98:
7f:92:c3:39:81:97:bf:a6:38:08:94:83:32:95:79:
60:7b:f9:1e:3b:e2:fa:9c:4e:1e:c1:4e:96:d6:53:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:01:29:7E:CA:38:3D:48:FA:60:26:DB:6D:29:7F:14:8F:CE:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42cca488-3eb2-3b71-9221-df9cbe5a5ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.22.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:24:1d:47:c9:b9:f1:a3:35:fc:ad:05:54:d5:95:ad:a8:21:
9d:12:8b:80:f5:2a:39:fb:ff:22:2b:76:18:b3:30:d2:18:99:
66:ab:31:4e:42:15:ae:1b:b6:5b:74:93:04:93:d5:20:74:b1:
b5:ec:05:a0:66:21:2c:5a:e3:c1:0c:95:b9:21:53:c9:b2:05:
81:bd:62:06:10:0c:ce:c4:d4:06:41:ee:59:8d:09:33:cc:03:
39:4e:41:cd:c1:a1:e9:b3:42:8f:e9:ad:8b:63:ce:de:0e:1e:
ee:82:d5:ba:94:aa:34:04:cd:18:05:12:39:29:d0:66:29:26:
6f:a3:51:65:33:ee:e4:f1:91:60:98:e6:3c:bf:9c:89:aa:a5:
04:b8:29:2a:23:4e:c7:14:04:42:e4:8e:0f:78:20:bb:4c:fa:
3c:23:3e:b1:d7:66:ab:e2:29:e5:a6:69:2d:44:cd:4d:a6:cc:
86:9e:f3:f9:d6:0b:95:42:07:8d:6a:61:63:c7:08:87:ca:66:
9f:40:0b:51:57:6a:38:9d:6c:ac:1d:e2:a0:84:0a:e9:8f:bd:
60:d6:bb:64:1b:90:f7:51:e2:c9:a0:39:1b:28:f2:18:6d:ad:
19:18:41:46:93:d2:0e:60:f7:0b:92:e0:38:1f:b7:e4:f4:44:
0b:e6:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:03:29 2025 by rpki-client