Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8688ac3a-7c34-3892-b4c4-99133b12501b.roa
File: 8688ac3a-7c34-3892-b4c4-99133b12501b.roa (raw, json)
Hash identifier: rJ2BFcbjHet2Vv7NqxTDIwS3XiHEHRXZyKnguwDHBLs=
Subject key identifier: 8A:67:6A:59:1C:A2:1D:77:C5:D7:E7:5C:56:FD:D8:95:A9:6F:5D:F9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D4CAADAB0DDC11C1D0330
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8688ac3a-7c34-3892-b4c4-99133b12501b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33489
IP address blocks: 50.225.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:4c:aa:da:b0:dd:c1:1c:1d:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8465e9cd-e007-4fc8-b2f2-11dc583137c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:f2:92:67:44:5f:cc:fe:8c:7b:88:58:eb:
6e:8e:64:08:df:71:f3:0f:b1:3f:12:45:80:c3:dd:
2e:a5:3c:78:e6:a3:5a:93:d7:f7:c2:4c:97:73:44:
a5:00:03:96:61:c3:86:92:b2:0c:14:72:b6:3a:75:
73:79:9b:80:f7:ca:e2:1f:db:d0:30:c5:ee:1a:9d:
bb:c8:80:51:86:31:c6:3c:c4:af:44:cc:3b:f8:04:
24:de:af:64:c3:08:8f:a8:90:88:99:1b:ed:e4:d5:
ae:32:35:ce:2a:9b:8e:fa:b3:c2:b5:dd:4a:aa:99:
fe:51:5e:10:bb:ea:54:ef:89:4a:57:de:8e:ce:30:
97:66:aa:0d:1d:9c:84:2b:35:0a:cd:e9:a8:d8:2e:
8b:0e:07:40:13:6f:28:04:41:50:37:29:bc:6b:0a:
27:50:ac:1f:56:06:df:54:44:05:6b:5c:e9:f9:f3:
1a:e9:58:ea:a2:d8:99:74:2f:f9:f7:7d:71:98:2b:
2f:da:59:83:5d:3c:9b:01:5a:e5:92:07:51:37:20:
a5:3b:25:61:ef:7f:ca:73:cd:e3:6a:07:c1:a7:50:
5e:2c:11:97:52:97:b6:08:1a:e6:f2:c0:10:42:d5:
73:06:34:88:56:a4:ab:75:d6:77:d0:71:32:40:4f:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:67:6A:59:1C:A2:1D:77:C5:D7:E7:5C:56:FD:D8:95:A9:6F:5D:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8688ac3a-7c34-3892-b4c4-99133b12501b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.225.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:e1:5e:6e:9d:f3:d3:0e:ae:d3:d3:1b:b8:55:be:64:db:4d:
e4:c4:a9:05:65:ee:84:82:8f:14:eb:d4:97:72:8b:71:6e:05:
69:bb:99:8a:e5:fb:07:fd:2b:7c:2e:85:9c:67:d3:2d:89:7a:
e6:cd:31:a6:50:86:35:33:58:bd:65:1e:f3:b2:f8:e3:12:2b:
d2:de:ec:fe:e7:01:9a:65:d4:fe:f6:44:46:27:ba:c5:66:58:
47:5c:90:58:44:5c:6b:06:29:e9:be:2d:a4:2d:56:4f:60:ce:
1e:f9:38:23:d1:b1:db:94:2c:2e:ce:93:c4:6b:d4:fc:97:32:
66:f3:8a:a8:41:47:dd:26:39:fa:54:5a:31:77:83:ab:ac:70:
83:05:4c:14:1a:d1:70:0f:e9:08:71:8d:91:9b:bd:fa:5d:31:
15:67:7a:4d:de:de:8e:80:bd:9e:86:22:7f:5e:53:9b:74:d7:
1f:7c:9d:aa:47:74:59:1e:fd:23:18:79:af:36:64:e5:fb:f3:
1a:3b:20:a9:76:36:b8:c3:dc:45:34:eb:42:41:22:69:43:14:
d1:ca:04:57:b7:35:94:16:08:8d:ad:d2:d4:df:2a:6c:48:44:
f0:5a:4c:d5:2d:ac:f2:ca:f8:17:63:36:8e:cb:dd:d2:8c:ae:
31:1a:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:05:34 2025 by rpki-client