Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7dee1d1-6e81-3c2e-af53-7137508d7493.roa
File: d7dee1d1-6e81-3c2e-af53-7137508d7493.roa (raw, json)
Hash identifier: Ta5ss1ZVZoLTZCXbL13MmjinyIyRS9Nkh+kS8XAHs9A=
Subject key identifier: DF:DA:FE:83:47:8E:56:0F:77:4D:07:8B:B2:D5:4C:41:A2:4E:14:A6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C1EDC0BEBFB584509CE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7dee1d1-6e81-3c2e-af53-7137508d7493.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.125.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:1e:dc:0b:eb:fb:58:45:09:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=c00122cd-56a5-484d-ae0d-332593b93a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:74:75:7e:70:16:f0:25:16:fd:35:80:12:
74:52:c2:cb:69:2e:89:62:09:4b:b1:ab:f1:3d:51:
21:ec:37:61:4c:56:5e:1a:67:4d:e6:b3:4b:9d:5c:
d0:52:e1:a6:70:a0:9d:26:9b:1b:c2:54:88:89:4c:
8b:6c:97:97:fd:d2:94:90:91:57:1e:3d:27:e1:81:
7a:fe:86:8a:af:6d:5a:06:f2:88:9e:25:56:30:43:
1e:03:6e:67:a3:ce:fb:2c:3d:70:ed:09:f4:21:ed:
0f:38:f7:ea:9f:08:36:43:3c:1a:29:c5:f6:8e:ac:
6f:8c:0b:13:2e:7a:58:b5:f1:00:fb:73:9d:4b:01:
7a:b4:ce:49:74:40:02:b3:cd:c7:14:a4:fb:39:d3:
e8:ce:85:a8:c0:1b:d3:d2:69:a4:57:c5:01:2b:61:
58:77:12:e6:4d:25:8f:31:71:eb:c7:7a:85:6b:40:
ca:b9:65:13:1a:72:8d:8f:0f:c2:20:53:e8:f5:79:
54:96:30:d5:05:ce:da:2a:57:7f:87:ad:6c:f0:63:
41:97:55:76:b0:1d:b3:ef:98:61:fd:df:8b:d9:76:
fb:78:c2:43:58:e3:34:09:56:04:49:1c:f2:64:1c:
89:1d:36:b8:42:fc:ec:25:21:d1:69:4e:73:02:43:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:FE:83:47:8E:56:0F:77:4D:07:8B:B2:D5:4C:41:A2:4E:14:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7dee1d1-6e81-3c2e-af53-7137508d7493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.125.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:47:b7:d2:77:e3:f5:73:6f:2c:09:50:3b:fe:df:99:ae:51:
36:26:42:9c:ca:8e:74:51:09:2c:7c:00:d3:6f:58:6e:ac:e4:
fd:9c:ca:c5:06:73:c5:36:04:a9:b4:e7:7d:0c:53:60:7a:eb:
b6:16:25:52:05:df:3c:25:cc:42:ad:18:9b:a7:36:27:3b:45:
64:29:fb:4d:21:a9:fa:54:b4:b6:22:14:00:97:8b:9b:10:8a:
b3:12:bd:3a:97:39:51:20:a6:f5:3f:e3:b8:1b:f6:5e:3c:6c:
68:c5:2d:c9:50:87:1a:4a:fe:3f:2c:34:d8:0f:c5:53:49:e8:
85:5f:75:a2:70:48:29:33:ca:47:77:7d:39:23:5f:97:6d:b5:
de:e5:25:75:da:e4:0b:07:0f:9e:a1:dd:d4:2d:47:af:77:4e:
24:87:3e:70:c3:65:90:33:76:9e:29:7b:fa:80:f1:bc:54:68:
37:3d:02:b7:8e:51:6c:9a:7e:24:b4:be:62:1a:fc:cb:5f:21:
e1:8e:1a:4c:93:69:78:31:9a:7a:03:7e:5a:20:de:93:b8:64:
a4:a6:b9:ea:ff:99:9e:88:8d:d1:1f:e7:8d:74:f5:09:09:9b:
07:ce:ec:54:58:ee:37:99:4e:13:50:46:4c:f7:f0:e8:38:d9:
83:c0:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:46 2025 by rpki-client