Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4f41a36-b20a-306a-8c6f-c6b7c665cc7b.roa
File: b4f41a36-b20a-306a-8c6f-c6b7c665cc7b.roa (raw, json)
Hash identifier: EprLam8Mbd/jsz6PRq45eQuOwxe79+01S5wHEQ3x6KQ=
Subject key identifier: 27:C2:33:F5:77:FD:AA:9B:D4:67:0E:17:97:B8:6D:37:28:84:33:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F822B7AB66514E7BB41D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4f41a36-b20a-306a-8c6f-c6b7c665cc7b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 24.21.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:22:b7:ab:66:51:4e:7b:b4:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=63fa1d38-8880-4fe4-adc4-fdb6d146d5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f9:6e:2d:65:bb:8a:36:15:12:42:35:6a:1f:
0e:df:b3:8a:dc:dd:d3:55:ed:0f:7e:7b:7b:65:eb:
8d:3f:64:1d:81:71:a2:a7:15:f1:59:76:3d:b1:97:
99:f3:35:fa:60:25:0b:07:d1:0d:33:20:86:e9:e6:
1a:ce:da:bc:8f:b5:51:40:8f:38:6a:fd:69:25:d8:
5a:cb:d4:6e:14:ed:19:8b:a0:f3:2f:76:44:18:1e:
3c:4b:03:b3:23:89:0b:00:da:54:d8:c5:67:88:ad:
81:fa:a0:05:22:9f:3a:ff:14:79:60:65:7c:88:7c:
8e:09:c7:62:35:8f:37:b6:11:c7:c4:e1:5c:43:9e:
e8:ee:53:e3:4c:a5:4f:a9:c1:72:90:93:29:68:f7:
25:d6:9f:98:80:74:8a:b1:08:9e:ad:50:96:c1:ef:
fc:21:41:be:a6:0e:7e:da:39:da:fc:15:01:f9:ba:
96:e1:c2:b3:b8:2f:c8:c6:f6:69:03:80:0a:c8:52:
9b:5f:47:14:a5:56:fc:dd:db:b4:3c:ec:2f:fc:0b:
a8:a5:94:e1:04:48:39:00:9c:c2:1e:f1:87:c9:88:
77:f4:14:f4:6b:20:77:7d:86:f4:73:aa:fd:cc:b6:
d4:63:1f:b9:bd:9a:ee:8a:34:a2:95:b8:49:70:87:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:33:F5:77:FD:AA:9B:D4:67:0E:17:97:B8:6D:37:28:84:33:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4f41a36-b20a-306a-8c6f-c6b7c665cc7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:65:06:7e:fc:01:05:16:18:ba:6a:8d:a6:f8:e1:27:bc:04:
9f:22:84:a1:93:69:94:f7:71:6c:8f:ae:c1:7e:fe:98:c1:0e:
06:e0:b7:1c:f3:67:83:06:f3:61:92:6e:54:b9:f1:fa:fe:b9:
9e:93:0d:b8:46:53:d3:1a:e1:1f:9f:ff:ba:14:dc:bb:10:1d:
4c:bf:7a:2c:65:a6:c9:29:68:34:29:9a:40:6b:38:d1:4b:c7:
67:fa:f7:6a:84:5f:ab:6d:3e:45:69:a5:b5:1c:42:73:47:d3:
9d:ac:64:0c:e3:e7:6c:bc:12:78:46:2f:20:cb:50:8f:ef:5e:
7f:9e:97:1b:5b:ec:70:d3:48:e5:a4:ca:1f:da:44:73:8d:9f:
4e:3a:0d:7f:eb:ac:b0:3a:a2:3b:fa:a7:dd:f3:b4:b3:5b:87:
ef:72:57:fa:ab:8c:63:89:55:d5:76:82:15:6e:79:0b:6c:f6:
17:70:70:62:76:60:9d:ec:a0:c0:74:8b:9e:74:1f:13:98:ee:
1d:66:a1:b1:aa:3c:ac:7d:2b:2e:62:61:15:e8:b1:1d:56:d3:
3b:52:82:b3:8c:7c:5a:2e:f6:c8:44:70:74:fb:45:6c:24:01:
1e:4b:c2:30:30:2f:31:d9:d9:fe:f8:8e:7a:21:e9:8b:41:db:
af:62:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:15 2025 by rpki-client