Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79ffc883-1739-3620-a525-c26b1b257d8a.roa
File: 79ffc883-1739-3620-a525-c26b1b257d8a.roa (raw, json)
Hash identifier: 7XFVlT3j/35F8L4GwO7KiZtvM/yNQC2+LxIcfCgiKgo=
Subject key identifier: 91:CF:42:76:02:BD:8F:43:79:DD:7F:82:22:8E:E3:B2:C2:54:1F:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C245228F3DF9714C5C980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79ffc883-1739-3620-a525-c26b1b257d8a.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.30.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:24:52:28:f3:df:97:14:c5:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=1fabb588-d6b2-45c8-bf77-a32d0efa9f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:93:f2:65:33:be:4e:a6:16:30:ae:76:af:
82:0c:de:2b:14:bd:bb:34:c2:8b:00:a6:d1:85:69:
3d:b7:40:73:84:23:b0:18:49:f0:48:56:2d:76:15:
0c:0a:64:52:fb:44:d4:dc:7f:64:6e:c7:a3:7a:00:
1e:6b:0a:81:e9:2d:29:aa:c8:79:c1:bc:c3:09:21:
56:ee:29:a7:7c:f8:bf:40:9a:1d:ff:af:31:2c:3d:
9b:6c:3a:cd:00:fd:22:4a:c9:73:e2:2e:1d:19:7c:
8e:72:3d:d6:e4:d1:a0:11:91:b5:01:f1:c4:1f:a5:
61:57:b1:f9:e2:1f:0f:e6:c8:f5:ce:5b:93:f7:f9:
26:2e:5a:7f:44:a8:87:58:c5:48:b4:31:60:22:62:
ba:70:47:78:eb:24:1f:0a:ab:b8:e2:9c:3d:b0:39:
39:7e:4e:a6:b2:ab:e5:23:6b:cc:87:ff:9c:e9:9d:
e8:c3:0d:c1:c3:6a:ba:77:0e:f1:94:ba:a0:13:02:
44:27:08:23:7d:f7:94:9a:ea:0b:36:26:1c:c4:29:
34:46:dd:8d:41:f4:57:8d:9a:f5:c0:12:67:26:16:
ac:f5:67:cf:07:15:7e:a9:77:db:95:ba:8b:92:54:
8d:98:da:88:0d:83:79:fc:ae:99:10:37:ab:0b:a8:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:42:76:02:BD:8F:43:79:DD:7F:82:22:8E:E3:B2:C2:54:1F:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79ffc883-1739-3620-a525-c26b1b257d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.30.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:3e:b5:30:c5:1f:aa:46:5a:7a:ac:21:90:1e:0e:f9:47:5d:
12:79:56:03:c1:7a:c1:e3:1b:d5:35:d6:76:6c:b7:33:e3:5a:
f4:02:bf:5f:3c:1e:2f:55:fe:2b:e6:71:08:ae:e8:68:db:67:
54:2e:03:7d:e3:9d:6f:4b:81:25:1a:83:8c:92:ee:8a:0c:20:
2f:d5:ec:a3:13:5a:3d:0d:9e:0e:62:5f:95:6c:03:19:3a:de:
49:92:77:58:64:d6:8d:92:18:85:2d:2e:22:be:93:89:24:7f:
c2:8f:97:2b:93:cc:49:2f:21:ca:3d:b4:0b:e1:05:07:a3:54:
71:b2:60:3c:56:77:6d:32:94:7e:77:81:cd:f1:32:20:ac:25:
14:51:fb:a5:8a:93:63:8f:c4:20:b7:55:54:a1:18:7f:50:4a:
ed:87:75:9a:6e:b5:fe:43:2c:6d:3a:ff:cd:74:6a:64:60:77:
50:c3:e8:09:99:4f:d1:09:12:40:aa:c6:98:04:13:5c:44:22:
3b:ca:35:61:d1:dc:15:54:f9:21:62:f1:4a:b0:7c:70:37:e7:
e1:33:00:e7:ea:0a:d3:3c:85:3e:ae:f0:7e:aa:68:73:54:6a:
18:20:4e:e1:83:29:f4:25:48:c7:5e:68:91:1b:2b:9c:8a:64:
f6:ee:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:07 2025 by rpki-client