Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/910c6d2c-cf37-3418-b248-44a0e43264be.roa
File: 910c6d2c-cf37-3418-b248-44a0e43264be.roa (raw, json)
Hash identifier: nCrH4jgEBvegVjxxA6inEGbZATSThPlCRg1yEIsTTFo=
Subject key identifier: 61:3B:B3:38:8A:13:31:F9:CF:FA:ED:1E:A7:B5:BD:EE:6C:C0:19:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6EE5694CD76E1DF6D6A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/910c6d2c-cf37-3418-b248-44a0e43264be.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.218.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:ee:56:94:cd:76:e1:df:6d:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=69b544d2-dbad-4b77-993d-d5cabcfbeb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:74:eb:7d:70:46:7c:60:1d:43:ed:3d:d5:
27:45:5e:df:dc:03:26:ab:d9:eb:48:6d:c6:55:4c:
49:ba:89:a1:af:0f:19:09:0a:91:d9:fa:7d:09:bd:
09:cf:e6:78:4e:3c:55:15:b5:95:84:d0:82:63:56:
98:77:af:9d:9f:04:b4:d7:e9:66:6d:cd:8c:4d:38:
70:ea:66:24:ce:4e:9a:fc:e1:d4:6e:e6:02:2d:c5:
8b:71:32:63:2c:a0:d2:9b:23:fa:be:e8:91:a4:01:
d1:35:0b:80:42:f5:d4:98:66:41:45:0e:28:8e:b8:
c4:30:b4:59:1a:61:8d:eb:b9:ab:db:a5:7f:ee:18:
33:a5:85:5f:24:ce:a2:97:47:51:b1:5e:3c:b3:03:
19:ff:19:8b:62:82:3f:70:bc:7c:9d:86:5e:7a:7a:
70:a4:20:7f:dd:86:af:b2:93:36:fd:4e:a6:9c:67:
2a:7a:55:21:dd:9c:d2:9f:ba:bc:7f:f0:db:49:b7:
3f:22:10:c4:51:92:ec:86:1c:71:18:03:d8:29:0f:
e3:7f:1d:fe:5f:66:d1:38:dc:1d:d6:9b:17:79:56:
fc:a0:be:0c:e2:eb:23:f9:75:36:da:10:12:a4:30:
f1:5b:fc:83:e7:f2:95:36:4f:b1:de:20:40:96:14:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:B3:38:8A:13:31:F9:CF:FA:ED:1E:A7:B5:BD:EE:6C:C0:19:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/910c6d2c-cf37-3418-b248-44a0e43264be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.218.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:02:6e:14:d1:97:86:20:55:71:82:df:ab:bc:d0:74:b2:41:
1e:9e:77:09:d3:a1:1a:0f:46:0f:5e:3a:cc:dc:68:5b:5c:e9:
51:ea:46:9f:9d:3e:1b:5f:4d:10:13:d4:04:a1:24:ad:e1:26:
14:ec:95:ed:45:f6:20:b0:83:68:89:e5:51:53:0d:d3:d3:bb:
72:3e:b5:0d:24:c4:cc:a0:8e:9b:c2:9e:bf:12:60:ce:1e:42:
81:50:ff:50:8c:1f:6e:fe:de:e6:82:24:b6:20:45:dc:7b:1c:
ff:68:69:c8:6a:50:4f:f6:16:fb:a4:9b:03:64:4c:62:ee:c1:
14:0b:12:d7:48:14:ae:ca:48:d0:25:20:86:da:87:52:98:ff:
9c:00:39:15:d7:e5:2c:ca:98:f3:45:c3:cb:c1:0e:06:68:d8:
86:66:e3:ed:ac:38:9e:87:10:3b:b8:c1:f5:24:a8:d5:d7:f9:
b7:f0:97:f1:84:a6:f9:b3:f5:7e:db:df:15:02:74:30:26:0c:
16:71:39:ec:e5:f8:11:d5:07:7c:b4:cd:f9:c3:a9:75:2c:f8:
ab:16:b6:3d:d4:6c:66:7f:52:72:c9:46:b0:8a:28:5a:c4:08:
e1:95:dc:f0:c4:37:d8:44:75:56:3f:48:b2:c3:79:c7:34:61:
03:ad:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:39 2025 by rpki-client