Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a931e4b-ba93-3ca0-ad93-8612dcc6fd1d.roa
File: 5a931e4b-ba93-3ca0-ad93-8612dcc6fd1d.roa (raw, json)
Hash identifier: /wV1CRZ5V21WMNWQjAmSdAYxvFlDtyAGub0+xKF71tA=
Subject key identifier: AA:CC:B0:53:CB:2A:54:B6:D8:EA:0E:D6:A2:FE:F9:82:64:6E:05:B9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C1F4903D92EAE6BBC3CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a931e4b-ba93-3ca0-ad93-8612dcc6fd1d.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.125.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:1f:49:03:d9:2e:ae:6b:bc:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=c975a75f-d1e4-447e-bd52-04eff3f67965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:6b:92:77:af:fc:cd:03:25:f1:74:f9:6d:
88:fc:e2:0e:93:42:af:a5:a1:b6:98:1a:ad:8b:31:
9d:03:c9:3f:87:41:65:04:e5:af:ea:97:8e:62:d7:
28:6f:d5:11:36:c3:43:4e:24:f6:ef:2b:42:a4:04:
84:f5:28:5f:ec:a3:a5:54:e9:06:aa:17:af:0f:4c:
a0:8f:59:40:fa:c4:a6:06:b8:9d:e7:c8:8f:30:1b:
ac:8d:c5:b5:e4:76:ee:09:5c:32:d5:a6:ac:66:77:
e3:49:cd:32:1b:39:65:2a:f7:e2:0c:b0:fe:b3:ab:
3c:a6:30:95:09:fe:81:39:f5:9a:15:b3:4b:44:1b:
3b:45:50:00:e4:89:c1:9c:a7:62:e3:6d:c4:58:86:
0e:48:05:4b:42:3f:30:4d:4f:3c:8e:30:83:58:25:
b2:33:37:2d:c0:2a:f2:9f:ef:94:99:59:81:fb:94:
a2:d5:08:5d:65:3a:c4:c7:03:fb:46:6f:9c:eb:22:
4b:dd:6f:a8:f2:ea:df:ab:6f:f5:e9:3c:e1:1f:dc:
21:69:2d:52:f5:70:7a:9d:67:a7:97:15:fa:b6:82:
19:4c:11:b8:6b:45:07:41:05:47:04:1a:69:2a:6d:
79:61:42:bd:a1:45:4f:9a:4d:71:69:67:39:10:4d:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:B0:53:CB:2A:54:B6:D8:EA:0E:D6:A2:FE:F9:82:64:6E:05:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a931e4b-ba93-3ca0-ad93-8612dcc6fd1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.125.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:99:38:6b:a7:57:36:8a:d3:43:b8:55:f1:49:5b:ed:46:a2:
e0:49:a0:f3:9a:09:2b:49:b2:b5:ac:c5:fa:af:93:67:67:6d:
3c:31:03:f3:2f:8a:07:08:0b:b6:29:c2:f1:ff:c3:e9:fd:06:
8b:ae:55:a5:29:4f:41:ac:6f:31:e4:f1:f0:1b:0e:53:8a:40:
b1:80:3c:16:7f:05:6c:11:20:e3:dd:22:e4:e3:d9:e8:6c:27:
0a:30:04:43:5e:d9:c6:ab:0c:07:75:01:56:a8:90:77:d3:8c:
8d:d7:9f:07:d6:be:39:e5:e9:2d:e0:75:98:e5:c3:d5:d4:aa:
bf:0d:5b:09:a4:01:a5:e4:92:0a:1e:47:29:81:1d:c2:bf:db:
20:8d:d6:2e:2d:92:48:1e:18:1a:37:d9:71:57:dd:6e:b1:08:
8a:16:f0:e8:f8:c6:1d:d6:30:71:46:bb:5a:a3:15:28:ee:36:
0e:5e:14:19:9d:ae:89:bc:4c:15:b7:ad:ae:e8:28:4f:8d:69:
e7:94:48:61:02:46:90:3c:36:59:86:af:a2:5a:97:c5:71:f9:
63:0c:aa:78:a7:51:25:f7:52:61:21:24:3d:7a:d4:52:9d:bc:
0e:a4:ea:89:68:21:8d:f0:b7:fc:94:69:eb:d3:6f:3a:ab:bd:
93:36:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:35:04 2025 by rpki-client