Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa
File: d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa (raw, json)
Hash identifier: I2UHIGFDnvMk7qPGmjRnnV/fWQbgqe6IlJmrZLiWC+s=
Subject key identifier: 23:E8:FF:CA:CC:92:23:DA:7B:AB:10:4B:1F:65:8D:CA:D2:93:06:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6EC7EF4457C794AD1B800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.2.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:ec:7e:f4:45:7c:79:4a:d1:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b764c408-6379-474b-a498-f7967fc9d8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:c3:2a:52:27:80:e1:f6:2f:e9:c9:91:5f:
72:b8:c3:de:8e:dd:21:a2:af:d5:18:9c:bf:65:7d:
b3:64:3e:b2:eb:ca:3e:05:a5:60:3f:60:81:37:51:
90:97:b2:8c:a7:1c:8c:36:ff:fd:0b:9d:cb:a2:a2:
c1:12:db:5e:45:aa:ef:33:f9:0d:7c:a0:a1:80:f9:
02:ab:ca:91:d3:1a:d5:43:12:a3:61:1d:79:be:c1:
9c:eb:8c:5f:a0:f4:47:94:2b:1a:4a:68:a4:19:8d:
7e:f1:49:66:88:c1:0f:3b:eb:35:a9:23:7b:4e:01:
32:7d:77:d6:62:05:57:86:f4:d9:62:5b:1e:d2:1d:
9c:16:f6:ef:b4:a3:9b:27:4a:0b:6f:13:7a:47:96:
59:6d:60:37:c9:ca:5f:11:0b:46:58:69:99:8e:c9:
dd:57:ca:a5:1e:00:6f:25:18:1e:27:75:b8:7b:2a:
53:f4:75:9b:96:aa:a2:df:34:69:f5:aa:c6:30:18:
46:39:8d:7c:e3:4a:46:33:50:3d:c8:11:21:8b:06:
7e:6d:0f:81:3b:c2:27:95:bd:3b:b9:ef:63:7d:b0:
25:43:56:f9:08:0e:00:d1:a2:e9:a1:eb:47:fe:fd:
b7:d1:cd:c0:8a:1e:f5:20:66:de:cc:28:f2:c1:d5:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:FF:CA:CC:92:23:DA:7B:AB:10:4B:1F:65:8D:CA:D2:93:06:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d70cbafa-2cc8-341b-a56e-8151898bd4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c9:21:54:bc:e3:4c:fd:0e:dc:83:f2:18:a2:b8:c0:d6:03:
64:3a:15:5c:9a:49:3e:4c:cd:4e:c3:d0:35:b4:fd:16:ce:8a:
bf:31:f2:cd:e9:ec:08:7b:3f:0b:97:e4:34:bf:0c:a1:54:e0:
c0:b8:09:a0:21:26:8f:29:3e:bd:71:6f:cc:21:5a:7c:c5:aa:
2f:1a:a0:5a:b2:f8:c8:e6:8f:7c:8e:2c:90:50:7e:d0:c0:da:
0b:30:86:38:0f:a7:b9:b2:2f:6f:31:0a:9c:9c:65:e9:35:a6:
88:92:75:b7:78:03:56:10:6b:1d:7f:8b:04:37:a2:02:d1:32:
49:9c:e7:1b:b0:f0:19:f3:67:87:3d:e4:33:02:20:b3:9e:e7:
43:ab:15:96:1d:06:66:c8:25:00:1b:84:09:1d:bc:7d:dd:3c:
b3:b7:22:cd:2e:84:e9:8e:8a:7f:d5:0d:1b:d1:9e:a9:42:db:
71:25:8d:54:bd:2d:7c:16:ae:ad:6d:1e:af:bb:db:91:7d:8e:
8d:be:b1:2e:98:00:6d:ad:01:b8:fb:b2:9e:3b:7e:63:86:2a:
6f:da:9e:0d:95:f4:35:36:ba:2b:12:8f:99:56:23:e5:cc:5e:
3e:06:41:ae:08:d6:60:2c:8c:fb:1d:c2:a7:8d:33:9d:d4:a9:
84:04:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:34 2025 by rpki-client