Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5913671c-f1d5-3ccf-9170-d33936f7e126.roa
File: 5913671c-f1d5-3ccf-9170-d33936f7e126.roa (raw, json)
Hash identifier: M4Fj0BHZx0/id4Ukp6sSDTi1gfQ2PmhdxbFGjZPaBW4=
Subject key identifier: F8:FE:4D:83:A6:47:EA:42:B0:89:AD:F3:17:C3:C6:FD:6A:EB:E1:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F82091678F47FF6855E1E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5913671c-f1d5-3ccf-9170-d33936f7e126.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 24.20.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:20:91:67:8f:47:ff:68:55:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4fcb8821-d42b-48fa-91fc-bded624e37b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:09:d5:ef:45:4c:b0:92:ab:44:35:af:7a:
96:9d:8d:f8:86:af:46:50:3e:b3:6f:f2:a7:d8:d5:
ff:5d:6a:84:3b:a8:9a:78:e6:37:7b:b9:ab:a1:32:
c5:8e:7e:5f:ce:90:09:a1:d3:ab:44:34:23:62:ee:
68:21:d8:c1:58:4b:fe:5a:d3:6a:b2:5e:a4:e7:33:
d6:27:80:03:9a:5a:fe:a0:76:9c:33:27:a8:79:60:
58:56:64:89:fb:6e:ca:1a:11:bf:48:04:b5:c3:ae:
cd:90:f3:59:e3:95:ac:c8:e7:9c:f9:01:2f:2e:fd:
46:4c:4a:55:ee:25:a5:c5:c6:0a:50:87:21:b6:1c:
3a:2a:bd:54:45:6d:e1:b2:df:30:c9:c7:2f:b0:32:
61:79:8a:f3:09:c2:78:b4:0c:e7:b3:3f:d8:8f:95:
a7:52:62:d9:37:1c:27:b6:ae:9e:63:1a:2b:f8:ff:
ac:21:1a:70:69:7a:cf:a8:41:50:40:1b:27:88:72:
5d:c0:77:89:51:50:5c:5d:10:ff:5e:f8:c4:f6:7e:
22:59:ef:64:f1:d8:42:b1:c1:28:4f:ad:da:2a:20:
09:6c:54:89:c5:b7:28:7b:dd:5f:79:0d:41:a9:f9:
2c:22:bc:60:4f:5d:61:25:97:fe:a6:60:26:b3:e3:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FE:4D:83:A6:47:EA:42:B0:89:AD:F3:17:C3:C6:FD:6A:EB:E1:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5913671c-f1d5-3ccf-9170-d33936f7e126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6d:ed:c0:1e:78:aa:54:cf:32:e5:fd:ef:ba:ef:98:e0:6d:
a8:df:08:b0:18:3b:2c:bd:eb:6a:53:f8:21:2a:ab:d1:e8:7e:
9d:fe:8c:e3:36:0d:cb:8e:80:00:b5:11:80:5d:c9:fa:95:44:
83:2e:af:7e:48:db:32:b6:fc:b0:36:fb:9f:d7:d9:0c:45:be:
6f:96:3a:8a:f7:f9:6b:85:ee:41:aa:0a:62:f7:38:cb:12:96:
17:5d:7f:ca:02:b4:d2:82:4b:0f:23:6a:90:38:5b:13:2a:29:
aa:f4:1f:a5:35:35:f4:9b:10:bc:cb:47:19:28:1a:6a:1a:d2:
e7:92:59:10:da:5f:27:e4:20:07:2b:df:c2:5f:b9:30:b0:7a:
cc:37:8d:82:0f:35:22:b7:55:d2:2c:ad:ca:8a:e1:80:86:da:
cc:51:94:e8:49:82:b5:1d:84:82:1f:d7:63:e6:03:b3:03:84:
93:0c:b5:14:1e:db:23:c1:33:2a:89:c6:10:8b:de:01:0d:df:
b4:ef:b9:26:f7:c5:bd:a8:c2:4d:d3:fe:93:b0:7f:9c:92:3b:
66:d0:60:47:fb:81:73:bb:8e:23:09:f6:b7:f0:06:97:94:84:
17:b7:f3:42:e3:eb:ac:c1:8a:13:f3:fd:ba:da:9f:a8:41:df:
b4:e6:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:42 2025 by rpki-client