Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa7c723-cc81-3aaa-bdfe-ae4342f6c4af.roa
File: caa7c723-cc81-3aaa-bdfe-ae4342f6c4af.roa (raw, json)
Hash identifier: awIfavLZQ0ktUPiw08kYg7m4q8VrYKHhVxm7I0Vr8yk=
Subject key identifier: E7:A8:63:39:14:09:8C:4C:0A:20:B2:A8:02:63:6A:73:DF:49:0E:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C6E65405E2246FBFAB180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa7c723-cc81-3aaa-bdfe-ae4342f6c4af.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 50.218.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:6e:65:40:5e:22:46:fb:fa:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=81ffebe0-9669-4c5f-8a12-3c1f845bf4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:dc:ca:19:f9:2d:e9:27:f6:03:7a:49:0a:
32:ba:69:aa:0f:47:77:af:d3:f9:72:45:7c:97:29:
6b:41:3e:df:7a:2d:32:c7:f3:04:55:2e:84:5e:55:
9f:32:43:e4:66:89:74:4d:03:fd:3e:6b:da:f0:9c:
7c:87:78:99:a8:18:b3:45:8d:00:85:c0:a5:f8:5b:
aa:0f:db:ab:aa:0b:8d:86:9b:5e:6b:d7:aa:bf:4b:
0b:62:13:d1:c7:9e:fc:9a:d8:0c:e6:eb:2c:9e:d8:
1d:05:43:bf:0e:13:0d:7a:d9:d8:85:16:b7:00:e6:
50:14:23:66:c1:db:85:c9:a1:ef:e8:2d:b4:2f:09:
a2:cd:80:5b:28:52:de:f6:8c:ea:42:82:16:93:31:
b0:cc:a5:92:72:12:4b:89:04:f3:95:f1:e0:f0:b0:
47:24:c9:43:6c:41:ce:82:5f:1a:b7:f5:4e:32:07:
4d:4d:56:ae:e6:23:dd:55:ed:8d:7f:22:d8:96:d8:
0a:54:ea:c8:bd:d9:b2:36:92:99:db:8b:1f:9d:ee:
16:54:9e:8d:19:e4:c1:7c:fa:67:cd:87:37:ed:8a:
a3:73:0f:ce:cc:38:b8:e5:90:99:32:06:4d:62:e5:
d9:41:bb:5f:6d:64:1f:7c:05:bc:27:18:1a:1d:cb:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:63:39:14:09:8C:4C:0A:20:B2:A8:02:63:6A:73:DF:49:0E:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa7c723-cc81-3aaa-bdfe-ae4342f6c4af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.218.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:1e:7c:80:fe:ed:8d:d7:46:a8:8a:7f:75:ca:57:9c:5d:38:
b0:af:b7:bc:25:9c:6e:96:39:6a:8f:3a:68:c1:6c:4c:f3:73:
84:ac:e5:b9:a2:10:00:98:a1:59:e5:a2:b2:fd:5e:df:64:1c:
42:df:d7:d3:f5:f2:49:90:ce:2a:0f:fb:de:37:08:6e:c2:59:
c5:39:60:0f:d6:9d:4d:5c:fc:00:41:bf:1f:8c:cc:d8:72:fc:
01:2e:f7:67:b9:2c:fa:bd:1a:4a:a7:d5:a8:82:2b:a5:1d:fd:
86:b7:49:31:c3:ef:1b:50:4f:46:7e:65:2f:0c:22:a6:42:92:
70:e2:dc:54:4c:9b:52:b6:e9:7b:3c:6a:48:f7:cb:d8:61:46:
50:70:a0:cc:79:8e:13:95:8c:34:ba:9b:5e:96:8c:fc:e8:32:
72:aa:4c:a7:d8:b9:f1:63:ed:32:72:95:bb:19:e1:35:7e:6b:
cc:25:aa:af:cc:b3:8a:66:ca:9d:49:b3:25:ba:b9:7a:13:57:
4f:12:6e:6a:65:d8:db:47:e5:a3:b0:2d:e0:54:91:ef:06:de:
c0:08:62:d6:bb:fa:c2:1f:cf:8f:f5:86:bc:9c:48:ca:be:f4:
79:12:78:a4:3c:66:62:14:6a:af:b3:79:7d:7b:82:90:c9:c7:
77:1f:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:29:14 2025 by rpki-client