Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f731a2d-1419-3edf-98fe-0b7c640c3642.roa
File: 9f731a2d-1419-3edf-98fe-0b7c640c3642.roa (raw, json)
Hash identifier: FA7P5g9HwqGpRHQ+kQH9d7ghu4gKWpguclaL/qziGNU=
Subject key identifier: 5F:43:E9:29:00:43:A6:A9:1C:04:34:7D:84:7F:63:04:E8:CA:DE:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6F24AAA6B57D66393CD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f731a2d-1419-3edf-98fe-0b7c640c3642.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.60.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:f2:4a:aa:6b:57:d6:63:93:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=a75d52e3-2572-4c0c-af96-80799d78a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:92:8a:31:bd:2f:35:b5:1c:6f:75:04:d4:
79:01:a3:5c:3d:ee:a9:4f:0c:d0:0f:1a:4f:5e:e6:
eb:2c:f8:91:3b:9c:60:4f:06:f0:35:13:42:d4:34:
6b:bd:d8:6b:33:7b:62:a8:4a:43:58:46:40:16:00:
10:68:3d:13:7a:0e:2e:a7:9b:c7:76:f1:64:8f:b4:
4a:87:a0:46:d4:46:93:a0:be:32:f1:67:46:f7:69:
c2:7b:c3:3a:c4:3b:01:80:be:da:eb:19:c5:e2:72:
5b:d3:55:19:d0:d2:b8:fe:45:ca:40:65:e9:90:19:
5a:d0:43:cf:da:ed:d5:b7:2f:39:38:ac:c3:29:f2:
9a:9b:b4:5c:b7:7c:4c:be:27:a3:fa:ab:81:16:ff:
ca:4c:f0:68:93:0c:26:7e:1e:8c:7c:38:8d:da:25:
b3:7e:1c:cd:f9:00:03:a4:00:9e:7e:8f:0a:08:c1:
de:7b:5c:91:7b:4d:74:38:8d:c8:c9:99:33:af:91:
be:6f:e8:2b:ec:57:83:9b:95:11:f9:07:b7:40:da:
7e:65:7e:2b:a5:6c:66:48:21:11:43:5f:4d:1a:3c:
df:51:bb:6f:d6:c4:b4:a9:01:fd:40:e5:24:d2:d1:
02:b8:9a:2b:63:ad:e1:23:c6:bb:61:89:74:f4:52:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:E9:29:00:43:A6:A9:1C:04:34:7D:84:7F:63:04:E8:CA:DE:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f731a2d-1419-3edf-98fe-0b7c640c3642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.60.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ee:5d:ba:81:c3:22:d4:b5:d1:66:be:d0:d4:1c:ff:f4:6d:
c8:b6:f3:83:96:a6:24:c2:c3:3e:51:e1:76:9d:df:6b:3d:d6:
0e:45:11:f9:9d:cf:bf:f7:e1:88:1e:aa:2f:93:44:9b:f9:fd:
03:b0:73:fb:e1:af:0a:9d:e4:01:55:91:9e:57:37:48:35:24:
b4:68:45:d3:ff:16:d5:99:88:6d:d8:8a:4c:61:8d:16:6b:90:
a7:01:92:70:5c:54:8b:bc:03:78:b8:91:0e:9c:d9:14:3b:ec:
01:7d:97:23:8b:4b:ff:e1:13:4f:34:5e:8c:32:3c:db:c3:c8:
9a:7e:c5:01:10:70:ac:f3:77:dc:45:95:a5:c1:d7:02:1d:e6:
98:53:35:36:3c:80:e0:d5:fa:d4:cb:36:85:1e:24:40:54:fd:
ad:31:e5:34:59:85:8b:8d:77:a6:fe:a1:94:17:32:6a:3e:48:
0e:ea:48:b9:62:11:ed:90:ad:fb:dc:d4:e8:c9:8a:42:0b:ab:
b1:7c:40:81:d6:91:44:1e:a8:01:ac:10:08:35:8d:3d:df:59:
99:aa:24:c0:c2:a9:42:68:14:66:9d:08:1e:09:33:69:84:2a:
5c:6b:6c:19:32:11:ec:17:0d:d1:b0:f4:8a:ec:73:ef:47:a4:
24:c8:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:39 2025 by rpki-client