Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71caa530-40b3-3c41-a9eb-79041a389473.roa
File: 71caa530-40b3-3c41-a9eb-79041a389473.roa (raw, json)
Hash identifier: hVAUwF4gR0ozBdNhLlZFNo+HZDsv50JaEaIhLOQXRzs=
Subject key identifier: 10:C7:32:54:E7:99:9D:90:88:8A:A2:6F:8A:87:12:03:78:96:40:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6AC1187C44270F5BAEE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71caa530-40b3-3c41-a9eb-79041a389473.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 24.20.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:ac:11:87:c4:42:70:f5:ba:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1b4c18ac-89fe-4ca7-94d9-aade11ca0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:02:35:c4:ed:3d:c7:66:3d:e8:7e:c0:4c:
b5:2e:d5:e8:ca:f5:92:77:07:92:d8:85:31:8f:00:
bf:49:c8:31:55:06:c1:e0:7f:90:1e:ae:36:f7:69:
6a:6b:ca:18:a2:43:d6:44:e7:2a:a7:83:7d:b1:7f:
b4:88:ac:f8:52:d0:04:2b:51:77:e6:f2:57:8c:d4:
bb:00:10:6e:31:55:1c:54:70:91:e9:6c:42:46:80:
32:ff:da:78:e0:85:49:50:fa:f4:a0:e1:c9:1b:43:
77:83:9c:6e:e0:15:a5:d7:7c:66:53:a4:f4:00:87:
72:54:e1:37:59:22:38:fb:77:af:43:2e:e8:86:3a:
f8:35:ca:55:99:ef:6e:c4:19:d7:97:e9:a9:59:8e:
8f:ec:13:36:41:60:60:65:ef:7d:0c:c7:75:de:e8:
ab:68:04:b9:57:f6:4b:1e:6e:54:4d:fa:be:13:12:
19:e2:e6:9c:9b:04:63:35:02:da:ce:f0:77:66:88:
e4:ea:6b:0c:5e:39:32:88:82:a2:90:5f:4f:83:e9:
5e:4b:9c:45:7b:b1:a2:1f:77:ad:24:e4:f7:cb:a6:
f4:51:2d:81:36:2c:ff:4c:bc:a5:1b:d6:36:fb:f4:
3e:10:e7:76:64:e8:f8:f8:76:59:b1:5d:58:e7:35:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:32:54:E7:99:9D:90:88:8A:A2:6F:8A:87:12:03:78:96:40:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71caa530-40b3-3c41-a9eb-79041a389473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:b2:24:16:53:ba:dd:ab:19:5a:52:8b:46:b2:98:30:d4:ce:
2b:c7:fe:d6:83:5b:6b:05:e3:57:71:da:29:b5:1f:d2:b9:69:
90:0d:6c:33:d2:f2:23:1c:5d:a0:70:50:46:00:4c:db:97:e6:
51:72:e7:28:0d:8c:0c:ff:77:f4:47:f8:fb:08:01:7a:79:3d:
93:df:4f:43:14:ca:aa:50:15:03:d9:43:b8:31:33:1a:18:16:
82:65:6e:d4:8c:07:d6:ea:02:f0:94:56:53:1b:f5:5f:1a:51:
fd:af:7e:1b:da:03:31:dc:44:ec:8b:b0:d8:67:9a:e9:cc:61:
78:bc:5b:72:c7:11:31:08:fd:e7:9e:dd:2c:1f:d8:ef:87:0f:
59:6d:59:e4:e3:8d:12:25:b8:46:23:53:b2:a1:0c:90:2d:98:
7f:d3:9d:f7:ed:de:74:71:f7:48:9c:2b:43:e5:7c:31:91:4e:
af:1a:44:49:aa:64:fa:5c:76:54:aa:36:24:3d:42:0f:8b:1c:
7c:01:01:78:dd:fc:72:70:9f:d5:b0:4d:44:b4:e4:9a:49:12:
c2:4c:06:64:b0:fb:c0:69:55:4d:86:30:72:bc:85:58:60:e2:
1a:c6:ba:6c:27:64:d4:8a:d7:ae:0c:a0:1f:af:88:e3:c2:96:
59:7e:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:09 2025 by rpki-client