Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/866e43d8-6d06-3e68-bb1e-f2c0471ecbd3.roa
File: 866e43d8-6d06-3e68-bb1e-f2c0471ecbd3.roa (raw, json)
Hash identifier: X8qBcWAa4AgSJXWnIXDh/bue9EMBaTZIqQm9iew6CaM=
Subject key identifier: 9B:D6:6B:AD:33:B1:54:6A:7F:6C:8A:27:48:54:52:44:A2:AA:45:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C418FE0C060BD0D247880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/866e43d8-6d06-3e68-bb1e-f2c0471ecbd3.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 24.7.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:41:8f:e0:c0:60:bd:0d:24:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=80a45e92-39ff-48b8-a49e-522e00bb474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:d7:d0:91:4a:27:9d:97:90:15:7e:92:7e:
51:2b:13:8f:3d:f8:2e:15:02:f0:a7:8d:0e:41:8c:
31:ac:9d:d9:f2:75:6b:ce:6f:a0:2b:34:32:d7:bb:
7a:8c:ff:d2:03:d6:55:e8:9b:db:d7:57:fc:a1:9d:
fc:d1:4e:a8:c9:e5:a1:bb:3b:b7:17:fe:b7:5a:ea:
4d:2d:4d:5e:bb:51:ce:13:ce:a6:cd:78:ff:9a:1c:
03:cd:f1:13:39:cc:c9:52:dc:11:d6:e5:85:6c:d3:
e1:23:95:a7:1e:35:72:a5:3e:4d:be:88:77:1b:08:
79:be:d6:f8:c6:df:38:3f:01:dc:16:68:68:0f:2c:
f8:89:b6:92:9e:31:f5:a0:86:36:3c:1b:7d:b1:fc:
14:6f:b7:b3:e7:2c:7b:f8:2b:c5:52:8e:01:a7:3b:
07:87:c3:a4:18:2b:9d:56:1c:8c:55:41:1a:8a:c9:
04:2c:ce:c8:71:9a:05:11:4e:5a:d2:1f:b1:dd:55:
d7:87:05:49:83:f7:c8:b4:9d:45:30:83:52:69:1d:
96:ce:8e:84:d4:81:91:c0:e9:e7:23:e5:ab:a5:87:
8b:ce:2a:0f:21:1e:e9:e4:09:52:72:80:cb:6a:79:
66:a5:3e:95:b9:1f:7e:f1:aa:ea:30:68:17:c2:df:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:6B:AD:33:B1:54:6A:7F:6C:8A:27:48:54:52:44:A2:AA:45:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/866e43d8-6d06-3e68-bb1e-f2c0471ecbd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.7.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:8c:3d:a5:01:dc:cc:98:4f:1e:5b:93:00:30:35:0e:52:59:
22:22:8b:4c:24:76:48:74:7d:74:02:3b:a4:01:c1:87:92:ec:
d0:b9:08:7d:69:8f:a4:ee:15:67:45:3c:92:50:1d:6a:70:b3:
be:0e:0a:30:b0:c7:61:be:5e:41:98:fe:50:ba:76:74:ae:1f:
b0:68:33:f8:8f:2d:9f:d1:b6:8d:d5:c2:48:5a:c5:2a:32:d7:
02:62:2d:ec:de:84:bc:ca:05:95:0d:c5:8a:26:1e:16:d8:5d:
11:e3:a3:e0:54:a0:64:e1:2e:09:f2:27:69:9f:3d:11:eb:cb:
b3:3d:8a:41:d1:fd:c3:51:6f:f1:bd:80:a3:ee:48:27:f0:b8:
fb:fa:56:83:e4:c4:89:66:d8:98:98:97:e5:60:1a:9f:ae:fb:
11:0b:85:4d:6f:49:d5:91:08:6b:4f:fd:f5:66:0c:96:f6:48:
db:02:6c:0b:ed:a8:ab:40:9d:25:6e:aa:33:c6:68:5c:94:11:
27:7f:bf:29:a9:6d:2a:5e:1b:b6:0f:b8:b3:fa:77:e9:e8:0e:
04:c4:46:36:2d:b5:8f:bb:45:1e:3c:8a:04:34:12:70:ff:17:
ca:fd:f8:f6:bb:2f:78:c3:ee:20:bb:a0:57:85:8a:72:36:80:
7c:4b:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:58:35 2025 by rpki-client