Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6eaa014-b706-3227-b331-bfe6a77a2f6c.roa
File: a6eaa014-b706-3227-b331-bfe6a77a2f6c.roa (raw, json)
Hash identifier: 3x7rqBbunU7prAuJ94ytUIXrILXXZ4YxK/pdvfHWzZg=
Subject key identifier: 8F:AC:DC:67:8C:7D:B0:64:C0:BA:06:FF:18:9D:2E:C3:C1:94:F0:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DB8A0D516AC58E4D61000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6eaa014-b706-3227-b331-bfe6a77a2f6c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 24.245.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:b8:a0:d5:16:ac:58:e4:d6:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8bf772f8-1248-4594-bb1b-04553e201f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:23:b3:97:46:7c:8c:62:89:ee:75:5b:1e:
6a:a0:68:01:10:29:e2:20:0c:56:c3:85:1e:cd:93:
fa:7f:c9:24:39:8d:ae:5e:c4:74:60:d3:7d:77:dc:
64:bc:30:bd:73:a9:f7:9c:bd:0c:ba:68:e0:fe:fc:
65:45:be:e9:ac:09:0d:f6:d0:15:1e:02:e7:61:2e:
38:77:2d:74:ec:bc:07:0d:a4:84:10:47:90:9e:34:
1f:5d:80:49:3c:b4:7e:06:1b:89:76:15:27:bf:36:
b8:4f:99:97:24:73:ff:8c:b1:61:25:f8:4e:b0:e9:
49:fb:37:d3:ef:82:a6:da:10:64:5c:71:d8:1d:85:
d0:04:bc:9e:61:00:f9:d2:66:09:ae:da:17:cb:d6:
b5:d0:08:00:f9:ae:2c:68:b0:ca:93:94:ae:c8:4e:
70:59:0e:05:e4:9c:a7:ce:5d:62:6a:cf:78:79:8e:
a1:36:70:b0:e7:43:23:0b:2b:b9:4a:c9:a8:b3:87:
67:8f:7f:ec:67:21:4d:d6:2a:27:45:24:e9:ab:af:
72:76:8e:f7:53:76:e9:16:20:0a:65:b5:46:42:67:
43:93:da:78:ad:d1:9b:cf:40:51:f1:2a:a7:43:f8:
bd:b7:e1:2e:b9:d0:93:3d:2a:10:87:1e:5e:78:ca:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AC:DC:67:8C:7D:B0:64:C0:BA:06:FF:18:9D:2E:C3:C1:94:F0:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6eaa014-b706-3227-b331-bfe6a77a2f6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.245.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:9e:57:ef:55:23:82:4f:5d:f4:47:8b:90:4c:25:28:34:c2:
91:e7:f1:a1:8a:c7:d3:c2:38:9a:57:8f:96:5f:6e:2f:4e:e3:
48:27:9d:d1:bb:25:0b:78:d3:a0:57:22:8b:06:e8:4a:b5:13:
87:89:1a:e2:77:45:7a:c0:1d:0b:88:eb:0c:3b:e4:08:86:9c:
b4:d8:46:67:f7:ae:44:af:8b:a6:bf:d3:ff:2a:1e:a2:0d:06:
d0:0e:1d:ee:7b:2f:b2:ee:b1:6f:a4:06:04:93:c5:fd:9d:68:
db:61:a0:ca:8a:d9:30:85:ea:1b:fd:e5:a5:92:ad:7a:1f:e7:
fb:55:4d:31:c9:26:1f:30:20:65:01:50:83:33:3b:07:fe:b3:
ad:33:89:14:a5:b3:e2:75:77:57:cc:a9:3a:78:fd:ce:35:c7:
d9:69:4f:eb:b2:ff:4f:70:7c:33:18:b1:a6:48:49:b1:02:ef:
5f:43:3c:ae:11:97:3d:6c:f8:d9:d3:c3:f9:41:9c:40:07:e0:
62:f7:79:14:10:1c:96:45:6f:95:89:ba:d7:cf:be:95:77:04:
b6:85:2a:75:e4:e8:47:79:b8:b9:45:7c:27:16:26:8d:d4:18:
7b:ca:98:4a:8c:fe:9f:bf:46:07:9e:42:7a:c1:9f:2b:3c:f9:
11:04:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:19 2025 by rpki-client