Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5e7858-debf-3917-a355-546a7e8676f5.roa
File: 8d5e7858-debf-3917-a355-546a7e8676f5.roa (raw, json)
Hash identifier: AcKne+z1xzq37cNo7scHPmloT5Uwz+YTf3XXhd1JJ70=
Subject key identifier: CA:7A:CC:67:69:C2:D1:0D:5B:55:E1:16:6B:AF:24:FA:29:1B:96:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF2DD2B88DC2A559A2A300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5e7858-debf-3917-a355-546a7e8676f5.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.12.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:2d:d2:b8:8d:c2:a5:59:a2:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=03ac2abf-419a-42eb-ac74-2e1bc7bc4f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ef:72:18:c6:b2:06:89:aa:73:84:4f:89:df:
b9:c9:cc:54:ea:ae:4d:e0:2a:8b:40:e3:a5:fb:57:
5f:72:8b:dd:51:4c:5f:24:7b:87:8d:1d:e9:66:d8:
22:27:7b:ac:51:85:1f:93:0f:69:0b:f4:63:8d:8a:
a0:7c:dd:ba:ca:e9:ab:91:e1:68:96:08:b4:35:92:
41:b6:4a:ae:0b:d8:94:6d:30:10:75:fc:85:ed:71:
05:9a:f9:15:96:2d:79:fc:ec:59:d6:0b:2b:66:1b:
29:b1:c5:bf:42:81:5e:d6:65:73:54:b9:ea:62:b5:
76:f2:7e:1e:c5:a4:aa:c8:9e:04:60:04:2f:2c:b8:
c6:5f:dd:b1:33:a8:90:a5:8b:11:9d:87:60:b7:d5:
b3:e2:74:ff:db:83:37:b0:27:ea:32:e0:34:e1:f4:
ea:de:ce:a1:fa:87:6f:43:c3:43:54:99:78:d4:39:
41:54:2d:bb:4b:4f:fb:d2:5a:37:3c:5e:d3:15:4e:
ad:be:5a:e0:f0:33:e4:ed:10:95:55:12:08:6b:68:
95:be:51:d9:b6:ab:65:44:93:ba:5b:93:4b:0e:4d:
6e:e6:71:9a:39:1c:53:6e:fe:27:76:a4:10:6a:2b:
00:d2:ec:44:bd:a6:c1:62:8f:72:b2:ce:38:1e:c7:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:CC:67:69:C2:D1:0D:5B:55:E1:16:6B:AF:24:FA:29:1B:96:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5e7858-debf-3917-a355-546a7e8676f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.12.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:6a:9d:3e:24:b1:4c:59:9f:a4:4f:73:be:ed:50:7c:cf:71:
c3:b5:44:90:9b:24:b0:1b:ab:35:e1:22:18:fa:92:77:f7:fc:
81:00:d5:60:3c:10:87:fe:bf:e2:12:cb:a9:87:5f:7d:be:f2:
fb:6f:f6:89:a3:df:29:b2:ab:da:e3:23:85:5b:e7:c5:8b:b3:
58:d7:e4:a5:3d:ae:d4:c1:e0:0b:9d:5a:94:61:77:b9:fc:7b:
5f:da:2c:13:53:dc:70:48:e7:b3:7c:74:d9:5b:a6:22:5e:fb:
57:9d:dc:f0:11:76:31:76:71:2e:be:c3:02:1a:33:59:5f:c6:
c8:2a:cc:58:6e:26:53:95:c4:72:37:b5:26:43:15:cc:82:e0:
10:78:0a:ca:e0:f0:41:35:ba:f5:dc:75:0d:5a:45:92:77:c3:
27:ea:a3:81:2a:b2:7b:cb:14:cc:db:c2:66:d8:d4:81:ca:6b:
04:01:13:74:c0:58:7e:5c:74:19:8f:1c:29:66:f6:0f:03:83:
e7:88:75:03:a0:af:72:57:b5:6a:a1:21:a4:37:13:f0:50:dc:
d6:0a:aa:dd:04:92:4b:85:d2:f8:44:8c:69:4e:5f:fb:4f:f2:
2a:67:17:f9:04:95:97:f6:43:f8:39:cd:a6:3d:d5:98:7e:0b:
73:e3:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:12 2025 by rpki-client