Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e153ee1e-52b8-3821-9ec0-977dda2ce43b.roa
File: e153ee1e-52b8-3821-9ec0-977dda2ce43b.roa (raw, json)
Hash identifier: CDHUbv8ESEP30eBkEL7OrOALVaopWl4pP5XlEV52ETA=
Subject key identifier: E0:99:A5:A4:8F:71:41:DD:51:82:80:FD:3C:73:68:00:81:2F:A6:85
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C856973266AEECAE42A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e153ee1e-52b8-3821-9ec0-977dda2ce43b.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.125.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:85:69:73:26:6a:ee:ca:e4:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=fab10ef5-22b4-4cd1-ac6c-88966406fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:b2:65:c2:86:61:48:90:29:75:97:4b:9d:
12:ac:97:17:54:d9:11:e3:1d:17:e3:24:97:04:00:
79:84:1d:94:0d:00:d7:01:a5:cd:00:87:24:1b:f5:
78:96:3e:a9:14:3c:4e:f6:1b:66:02:a5:54:65:ee:
89:2a:22:71:61:eb:32:70:d4:dd:13:bc:a9:87:8b:
56:8d:80:ea:14:c3:64:95:60:f6:61:05:e1:7c:72:
d8:15:e7:f4:44:a2:f5:de:b5:a0:65:6b:82:06:1d:
81:93:2e:3e:cd:44:00:1c:9b:61:5c:61:f2:ed:ec:
bd:4b:8a:cf:88:5e:b0:07:b2:12:f4:82:bb:9b:c5:
77:be:d1:68:cc:65:3b:68:35:c2:c8:15:80:85:2c:
ca:b4:de:1e:1f:8c:72:dd:0c:35:97:23:03:54:98:
dd:f2:8f:ae:33:2d:e6:6d:bd:cb:23:ce:da:29:3b:
fa:c6:21:5f:81:00:3f:5b:22:16:d0:1d:00:01:67:
eb:9b:76:52:18:6e:31:5d:be:4f:8f:7c:81:44:d6:
09:7c:c2:44:58:d7:5f:f1:d4:52:0a:4d:d8:45:fc:
9a:b9:ce:c6:28:1a:7e:37:31:8a:31:22:51:b2:02:
c2:29:67:30:ea:f2:ce:d1:c3:58:f5:1b:bf:77:0e:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:A5:A4:8F:71:41:DD:51:82:80:FD:3C:73:68:00:81:2F:A6:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e153ee1e-52b8-3821-9ec0-977dda2ce43b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.125.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:a5:28:68:fd:2f:3e:1a:be:7f:50:91:a5:62:32:87:9b:d0:
91:95:1d:38:cb:88:41:b8:cf:67:48:06:0f:88:fd:01:1b:da:
50:2a:70:11:46:05:1c:c1:78:39:d0:5b:57:60:68:fa:31:64:
6c:3d:6b:e9:f3:c5:8a:4d:76:bf:5a:37:d0:9e:44:e3:39:6d:
b1:dc:52:a8:09:ae:09:82:bf:09:05:76:c7:fe:f4:d1:61:0d:
cb:7e:12:66:c4:7a:40:6f:22:de:b5:84:2b:cf:eb:28:26:c2:
fd:1b:19:f4:ef:7e:0a:9a:26:4b:f2:60:e7:0a:fd:96:6a:88:
56:c7:24:30:c9:ce:b5:6a:f9:16:f5:12:b6:ec:e2:c0:c3:d2:
cf:88:c1:83:02:45:8f:c7:77:29:1c:2a:c1:a9:03:c1:8e:9a:
a6:76:0e:dc:1c:62:21:37:ef:f3:14:12:5c:a9:8a:8d:60:71:
5b:7f:9e:70:93:54:5c:43:5c:d4:94:f8:40:e2:22:40:ca:f6:
db:6f:01:a5:ee:0f:14:70:1c:bf:cf:61:69:62:e7:04:d5:23:
d5:44:17:61:2a:96:65:39:d4:49:6c:46:49:f3:47:ee:96:ac:
af:7c:ba:cf:9c:b5:ba:69:4c:ba:c3:95:5b:c8:6f:cc:76:5d:
74:bb:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:33 2025 by rpki-client