Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5079c521-f095-3ed7-b818-71f2daa3388c.roa
File: 5079c521-f095-3ed7-b818-71f2daa3388c.roa (raw, json)
Hash identifier: ybgiiTAk75QS74iY3qUeIeDZJOzguyAtCt7cGcKbWKc=
Subject key identifier: 98:15:DF:2F:21:89:42:CB:1A:2F:AF:D3:83:5F:07:66:1B:FE:00:16
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF2D4C435E2F8B9C48D5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5079c521-f095-3ed7-b818-71f2daa3388c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.12.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:2d:4c:43:5e:2f:8b:9c:48:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0258517f-a344-4a2a-b783-1b76efeb9230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:d0:bb:a2:8e:73:a6:a0:50:04:1a:13:77:
8c:cc:09:c3:cf:2e:1c:b1:e2:84:0a:f9:2c:89:25:
52:a7:8b:0e:df:76:fa:9a:dc:f6:39:18:0f:89:8b:
f2:11:94:d3:6b:3c:4c:21:dc:01:56:7d:3b:d1:0d:
82:63:3d:c0:4b:03:75:1c:c9:96:bb:2a:42:a8:b5:
3d:ac:f5:81:5e:4e:0d:3f:ba:c1:5b:6a:b1:86:54:
ac:8f:9d:d7:6b:23:b0:8d:5f:e6:cd:10:09:f8:38:
a8:27:1c:b8:2b:81:c7:8d:21:64:52:ce:e1:51:24:
30:48:9a:8c:88:0d:b8:73:3c:69:a9:30:8a:05:b0:
98:ed:d0:f9:83:4c:72:5f:4a:5c:70:ae:64:a4:84:
59:ba:80:3c:dc:cc:18:b8:76:a8:56:9a:72:09:42:
e2:5e:2e:ce:f6:35:53:a9:8a:ad:81:4e:a9:11:de:
85:33:e5:03:5a:c5:4c:09:b0:42:5e:f2:ab:31:c0:
82:94:91:24:84:43:39:91:58:f3:5e:fd:3f:99:a6:
95:bf:33:af:22:31:b4:89:cd:b4:64:fa:56:d9:92:
31:68:01:94:ec:73:d0:2b:17:78:82:fd:4b:6f:8c:
db:7c:ab:c3:c4:0d:76:7a:fb:21:bd:17:85:ee:4a:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:DF:2F:21:89:42:CB:1A:2F:AF:D3:83:5F:07:66:1B:FE:00:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5079c521-f095-3ed7-b818-71f2daa3388c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:36:09:22:2a:f1:81:0d:88:20:b8:57:a5:58:b9:1a:9f:80:
c8:8f:47:89:58:7b:01:a8:71:95:4b:09:04:18:a7:7e:61:f8:
47:77:84:d7:4c:3f:be:a5:f9:1b:ea:a9:74:16:68:9f:7e:2e:
e6:31:dd:fb:cf:db:ac:c1:ee:06:f4:e5:31:90:c7:f6:da:ef:
6a:55:60:12:96:7e:48:69:68:50:14:6f:b3:70:b7:12:98:cb:
4d:4c:98:94:51:a5:86:d3:2b:9b:f3:ea:df:a4:47:18:f9:1f:
52:27:4b:bf:47:31:d9:50:d6:da:ad:38:c6:e7:7d:0c:0e:f0:
b0:67:41:e7:43:24:98:46:0e:cf:0d:e5:1d:58:6a:95:90:29:
51:5a:65:a9:69:73:1e:0b:bb:94:c3:1e:de:e0:54:1e:a9:c0:
a9:44:7a:eb:19:87:d5:51:be:f0:b3:33:a8:ce:c7:f4:b4:41:
e0:86:8e:3e:bb:50:02:c2:7b:67:83:cf:33:07:04:b3:e9:44:
38:a7:14:58:cc:8f:0a:9b:d7:32:16:a3:ad:96:9d:39:72:c3:
8c:ec:a6:6c:83:f7:7f:8a:32:2c:9f:07:d6:c7:a6:6c:49:86:
29:cc:e7:bd:11:b6:01:6e:e0:7b:79:d1:04:a1:be:7b:92:5c:
3c:13:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:08 2025 by rpki-client