Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77d74f6d-f131-3e63-91b4-5c477cfbeec8.roa
File: 77d74f6d-f131-3e63-91b4-5c477cfbeec8.roa (raw, json)
Hash identifier: BsXeEISXXApX4SKko49pZEdDUXclDMPlr16EOqs5jxg=
Subject key identifier: 33:80:DD:71:C9:DF:89:0B:D5:C8:73:44:A3:3C:71:E3:A3:5B:EB:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C297C93CDADACF46FA080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77d74f6d-f131-3e63-91b4-5c477cfbeec8.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 13367
IP address blocks: 24.7.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:29:7c:93:cd:ad:ac:f4:6f:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=71a78855-05ef-468a-836a-e32613673b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:6e:4e:cd:ac:04:f2:8f:6c:d9:9c:f1:80:
15:16:8d:dd:45:ae:8c:56:97:6e:33:d7:68:c0:73:
5a:01:c7:53:82:3e:88:1f:30:1b:87:78:bc:ab:2b:
43:b8:4c:02:ea:a0:e6:21:5b:19:64:4a:a7:b3:33:
d2:a4:c1:97:ac:7b:80:c2:d4:69:f7:9a:97:ea:7d:
da:29:9f:fe:b1:18:07:83:08:f1:a1:9f:27:e4:7e:
fc:ea:4f:13:a8:c1:e1:8b:f4:fa:02:b4:f9:a6:68:
c9:f6:13:b2:2e:f1:d7:ed:b4:f9:dd:0e:6f:04:68:
8c:7c:57:bd:90:0b:3b:09:4f:ba:ac:96:8e:33:6c:
b1:5c:1b:3d:52:1a:af:c8:3f:dc:5e:ac:97:ae:f6:
60:09:e0:a8:39:52:ff:8c:71:4b:d7:ff:a3:1c:e1:
b6:06:3b:56:2d:c1:c0:69:a3:c3:25:df:f5:3e:4a:
c6:78:c3:b7:c0:17:9c:a3:fa:3d:64:d5:f3:25:44:
77:b8:e1:02:1a:21:29:51:48:1a:e1:8a:ca:51:fe:
9f:d0:f4:c5:57:63:f7:a6:88:81:e8:16:03:56:65:
6d:6e:6e:29:53:fb:89:18:84:06:fb:d6:68:94:70:
47:ed:83:80:1c:af:fb:ca:99:60:54:57:47:65:90:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:DD:71:C9:DF:89:0B:D5:C8:73:44:A3:3C:71:E3:A3:5B:EB:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77d74f6d-f131-3e63-91b4-5c477cfbeec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.7.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:66:6d:c3:7e:c6:f1:33:66:95:3e:0e:03:d9:b0:84:69:38:
ed:1c:b8:7f:cb:40:61:b4:c5:3c:bd:fc:08:b2:c4:7b:4f:01:
21:d8:5b:a1:7d:cf:78:0e:80:56:a4:dd:5b:ab:42:f0:bd:e2:
8c:5f:f3:99:56:e8:78:10:c4:9b:f9:36:ee:65:5a:6f:48:cc:
dc:f1:02:0a:b3:cc:67:0b:0d:d7:99:d9:b2:f9:ba:d0:70:c0:
ae:33:03:83:3d:17:82:eb:74:31:d9:05:29:9b:52:6a:3e:97:
3e:73:5a:1d:dd:a7:f9:7f:f5:9b:f3:f1:d7:af:1c:cb:79:df:
a5:a6:4f:3a:89:8f:50:a3:ad:3c:ea:9d:0b:cf:f0:8d:04:dc:
ff:d3:b4:b4:33:c0:a4:ef:d6:30:fb:8a:bd:4a:34:06:98:0b:
b0:9a:01:d5:56:82:ff:63:c1:e8:e5:28:37:54:7d:b5:11:6e:
ea:a0:5d:51:04:e0:5c:35:f4:eb:42:73:3a:df:0a:95:ff:8a:
0f:24:41:94:a7:1c:ed:0c:56:39:1a:41:35:5a:24:f2:0f:5f:
eb:59:47:6b:8d:72:b8:f0:2e:f3:eb:e0:bf:8b:52:f6:b7:30:
37:5b:e9:88:d7:33:04:c7:f2:ae:c5:62:5a:01:42:3f:47:11:
31:a6:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:09 2025 by rpki-client