Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ec09f16-c397-3c88-8ea6-24c1813addaa.roa
File: 4ec09f16-c397-3c88-8ea6-24c1813addaa.roa (raw, json)
Hash identifier: k4SsTbMEpwWETaGOFyDFw7Xszi9wJiv1LR9SfqvBOTM=
Subject key identifier: AE:52:8A:56:04:93:DC:13:8A:F3:F4:29:B4:E5:AF:C7:04:DF:2A:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C137BC44CD2291F0B6380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ec09f16-c397-3c88-8ea6-24c1813addaa.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33662
IP address blocks: 50.239.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:13:7b:c4:4c:d2:29:1f:0b:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=648aa949-2eeb-4fcf-98cf-a5fcd17e2d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:20:30:0a:96:b5:27:07:26:37:5f:86:1c:
e2:64:54:40:75:3d:e5:ff:8f:d7:e7:33:f4:09:76:
90:0e:8f:42:ff:7f:00:fd:f3:0a:4d:34:c5:19:0f:
92:09:41:5d:b2:29:a7:26:3f:80:60:8b:c3:4a:97:
60:01:8a:b0:2e:02:e6:d4:21:db:56:9a:68:b4:ef:
d8:44:8b:f4:eb:bf:ce:91:7b:b5:1e:59:c8:3a:7a:
21:0a:18:a6:93:a6:8f:a5:28:76:03:41:16:7d:b3:
fd:ae:86:89:7d:77:5f:b2:9e:6c:0f:83:f8:ad:49:
5b:19:69:43:23:dd:3b:d2:79:fb:49:90:28:e1:14:
65:75:ce:72:11:35:31:be:8c:1c:95:bf:52:d8:e4:
43:3c:6d:05:50:8a:bd:d9:2b:f3:98:2d:6c:91:db:
bc:2d:77:51:1a:f3:66:9c:cd:3d:3d:87:2f:97:2e:
45:25:55:b3:23:fc:f7:07:a4:ad:3d:06:11:ef:47:
01:a9:de:10:1d:74:d2:31:d9:7e:a5:b7:df:3e:96:
a0:d1:16:e6:07:93:75:e6:74:d6:4e:87:c9:04:eb:
00:ce:80:40:f1:7a:98:1f:ed:1a:52:65:5f:c2:3c:
7e:97:ca:b7:48:84:8d:04:ac:f6:2d:7b:7e:f2:b5:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:8A:56:04:93:DC:13:8A:F3:F4:29:B4:E5:AF:C7:04:DF:2A:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ec09f16-c397-3c88-8ea6-24c1813addaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.239.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:17:01:05:d1:4d:42:93:f7:0f:21:e8:ae:24:28:8b:19:b7:
31:ab:56:00:b9:fb:1d:94:6a:c1:ee:4b:59:6a:23:77:b0:40:
92:82:bd:b7:8b:dc:a9:57:32:76:c5:bb:f6:de:f8:01:27:14:
bd:9f:42:ee:f2:c9:2d:81:53:91:31:8e:67:8d:23:e6:b2:30:
40:ee:75:f1:70:14:ad:02:e2:7c:e7:4b:f0:a2:33:39:b2:98:
ca:8f:44:60:05:db:c2:ce:a0:99:39:da:f0:d1:f9:77:ed:cb:
71:46:70:ff:fd:aa:1c:ae:73:4a:7a:7c:b7:92:3c:3f:0a:94:
d0:42:77:73:0c:7e:36:2e:65:92:7f:9b:e3:c3:ac:3d:9d:02:
55:7d:ba:e9:4d:c6:a1:99:d1:32:8c:ba:02:4e:7b:64:5b:b9:
22:00:9d:b5:7e:e5:b9:6b:0b:ee:74:1f:01:fd:28:5d:5f:6c:
d7:34:0e:62:79:b5:3c:76:95:10:03:4d:70:1d:b5:d6:9c:5f:
9e:32:80:53:68:1e:fb:a4:2a:77:ef:77:c4:4e:94:d4:b7:56:
5f:73:73:11:a0:53:6e:0f:01:44:a1:2c:59:60:81:9c:22:05:
b4:4f:35:0e:92:3f:d5:7c:d0:25:12:87:50:84:0f:89:ce:40:
42:b1:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:11:45 2025 by rpki-client