Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1676387-bb70-3a8b-876f-33bb4c876a7d.roa
File: d1676387-bb70-3a8b-876f-33bb4c876a7d.roa (raw, json)
Hash identifier: /kahPQbjBvuXefCutuKUeszQIXZDpyCCU5q7ouAIhf4=
Subject key identifier: 9C:D4:A9:3E:D2:11:22:0D:FC:76:BF:6D:05:08:4A:EE:4F:2C:7B:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6AE806007DF232288CAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1676387-bb70-3a8b-876f-33bb4c876a7d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 24.21.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:ae:80:60:07:df:23:22:88:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d7703e86-f814-4fbb-b92b-5952e0a0b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:f2:32:5e:9d:e1:46:c8:9d:22:cf:df:46:
dd:5e:ba:34:97:5d:9c:da:9e:84:eb:8a:d6:f6:f1:
39:52:40:b0:6e:91:b9:55:30:0d:ed:4c:66:57:66:
95:d3:74:85:c4:34:1c:53:67:fe:f3:8b:e3:dd:cc:
a1:4e:e9:0c:c9:57:0b:91:6b:5e:5e:7c:51:a5:dd:
bd:f7:32:c6:28:dc:2e:b0:6f:d1:25:24:87:7a:4a:
56:8c:4f:87:db:59:a8:3b:cf:51:8a:45:c3:22:23:
e6:2c:b2:84:2e:57:d0:d1:43:7a:74:33:2e:d7:42:
ff:61:b0:15:56:d1:39:59:32:d6:6c:53:79:75:43:
e6:19:2e:6e:a6:cb:c2:e6:22:7f:54:f2:bb:b9:da:
9d:67:57:e8:42:71:55:20:cd:d4:47:7c:b6:00:7c:
c5:b9:a2:e5:c1:30:5b:70:c9:b9:6c:bf:b0:17:e7:
79:84:dd:be:af:82:2c:e5:61:6f:df:1c:cb:c8:02:
33:a3:bc:1d:a2:f0:fc:1f:db:7b:43:4a:cd:e7:67:
dd:bb:4c:23:ea:82:5d:e3:42:3b:80:19:87:a3:db:
c5:f4:6b:02:50:c6:a7:2e:11:da:42:f0:00:8d:99:
06:0e:2d:75:8f:d0:a9:a2:ff:87:4a:0f:d0:a1:24:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:A9:3E:D2:11:22:0D:FC:76:BF:6D:05:08:4A:EE:4F:2C:7B:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1676387-bb70-3a8b-876f-33bb4c876a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.21.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d4:67:82:68:4f:a2:41:03:80:c2:31:72:ec:18:88:b5:20:
09:b5:63:11:d3:f0:3e:43:c3:28:6e:af:fe:6e:91:7b:81:43:
02:53:fb:6e:35:c4:34:bc:83:b4:f8:d0:e1:24:f4:57:52:2b:
1a:89:53:40:c0:70:5e:35:35:78:62:34:ec:ab:5b:c2:56:b1:
16:21:dd:84:13:90:08:15:a7:4e:71:d6:bb:1b:78:31:64:5f:
a6:92:9d:06:e5:cb:75:4c:03:73:7b:f1:7c:a7:fb:29:cc:26:
63:33:12:f8:d5:69:22:22:67:67:98:76:5c:0b:cd:4c:c4:e8:
86:6f:a3:67:19:81:63:7a:73:0f:ef:d4:56:22:55:28:66:e3:
e5:ec:89:71:25:82:93:7f:ef:cb:bb:9d:02:fe:6c:1c:49:f6:
97:e3:e4:c1:96:b9:47:4e:06:3a:5e:6f:a0:8f:cf:b4:c0:c3:
b9:a4:58:2b:05:7c:75:ab:9e:cf:78:a3:fc:a3:c4:b9:03:10:
13:0a:05:92:4b:d5:27:63:63:a7:ca:7c:67:32:42:50:ee:88:
3e:53:03:c2:cb:91:0d:4e:f2:2e:e1:25:b7:95:cb:f6:fd:73:
3a:92:18:09:b4:ce:6f:f2:05:3e:9e:54:6b:3b:3d:fd:4c:f9:
89:d3:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:49 2025 by rpki-client