Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c78628-be53-3162-80d5-b5c1ea8334ec.roa
File: e6c78628-be53-3162-80d5-b5c1ea8334ec.roa (raw, json)
Hash identifier: MPvqw73MotMBqcPX9wVnTAeBzEsAJ1d0Y412UtxX9hg=
Subject key identifier: 50:A3:2E:7E:CA:69:40:66:88:97:4A:36:6A:9D:E1:D8:E7:B3:98:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF2B8342F73970BE971BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c78628-be53-3162-80d5-b5c1ea8334ec.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.1.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:2b:83:42:f7:39:70:be:97:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d8e09794-e346-4a58-b8c8-01c7572ea84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:2c:57:a6:d0:d2:4d:5a:1b:5c:bf:e4:97:
0b:2a:98:e7:f2:e9:8e:93:51:3d:f1:7c:37:fd:e8:
68:01:d0:de:10:0c:24:40:c1:d8:cd:ce:fe:c2:24:
2e:db:35:34:8e:b3:37:66:68:ef:83:20:cd:31:25:
6a:22:c2:1d:f5:24:96:9d:1a:7f:a7:b7:03:f6:91:
ed:87:62:57:bf:80:5e:32:67:ce:1a:67:f0:31:74:
3a:26:32:dd:2b:8d:35:2c:b5:fd:30:b9:cc:11:e8:
0d:09:2a:5a:cb:7e:c6:6b:c8:42:81:c4:00:c7:f3:
bc:80:66:05:1e:e2:fa:f2:54:3b:1c:bd:c6:ae:78:
81:46:bf:8d:6e:04:f4:aa:91:e7:61:07:b5:b0:46:
21:31:d2:3e:17:0a:98:69:a9:07:82:ae:c0:a5:28:
de:53:5b:c5:23:27:68:73:9d:36:1c:23:a9:25:0b:
8e:39:4c:64:25:06:dd:a0:c2:f8:76:5e:98:1b:3f:
65:12:43:c0:77:89:a6:23:83:11:e1:16:98:a3:2b:
14:fb:45:17:c7:dc:34:b3:4c:43:b8:71:55:51:a4:
1f:3d:96:57:b5:94:75:6b:55:e4:ac:10:7f:48:6a:
e9:c1:5f:28:04:01:29:70:63:98:0c:77:d0:b2:60:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:2E:7E:CA:69:40:66:88:97:4A:36:6A:9D:E1:D8:E7:B3:98:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c78628-be53-3162-80d5-b5c1ea8334ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ff:df:28:59:7b:ee:0c:6d:7a:03:ad:5b:f7:62:c5:9e:e9:
67:63:84:9b:c2:89:f6:89:bf:47:62:60:ea:2e:7f:1f:0b:de:
22:c6:e1:02:dd:28:39:f0:ac:98:33:45:5c:aa:8b:1d:0b:70:
4a:72:b0:18:b8:48:4c:94:f3:11:ac:76:08:aa:92:3b:0f:98:
8b:3d:2b:e4:a4:2c:d2:ea:46:ae:6d:7a:b3:f8:2f:da:df:cb:
66:aa:2f:83:91:cd:b2:58:cf:6c:ec:99:e3:19:0d:63:6c:55:
8d:ef:6a:42:67:c0:0e:98:6b:2b:0c:d2:35:d4:7b:3b:c7:19:
b7:fa:cc:80:a3:14:0d:36:8b:61:d4:e8:24:76:34:c2:88:86:
17:a3:ce:d6:81:aa:4d:b2:1f:43:61:db:28:5a:a7:27:65:14:
eb:3e:9b:3e:44:13:e5:c7:b6:31:68:88:76:fd:f0:7d:26:c2:
c3:5c:fc:3b:b3:b3:77:25:7c:d9:53:1f:ea:de:91:d1:bf:fb:
01:95:ec:f2:f6:3d:48:b9:3a:d5:7f:3d:a2:3e:55:6e:3a:5b:
d3:31:9e:aa:93:39:49:37:3d:fa:b6:c8:31:51:0b:1d:6f:93:
13:a5:fa:55:6e:6c:2a:2d:db:a0:07:fc:18:37:58:3b:3a:ba:
bb:f9:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:13 2025 by rpki-client