Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9b1a1b2-c62e-3238-ab7e-2560d2147fd4.roa
File: f9b1a1b2-c62e-3238-ab7e-2560d2147fd4.roa (raw, json)
Hash identifier: MsrkNyptsmGaMeQd1QsUGCD7g5v3ehvgX+fmxzBRgPc=
Subject key identifier: D3:7C:C1:A1:B4:0D:B8:C8:E3:EF:C3:5C:70:05:99:4F:E6:A2:D3:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DDCDF6DB90A938F18D300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9b1a1b2-c62e-3238-ab7e-2560d2147fd4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 50.224.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:dc:df:6d:b9:0a:93:8f:18:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d157aac1-3008-471e-887c-71397927cf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:e5:31:a9:fa:85:25:3d:e0:7d:5d:2e:a2:
fa:66:85:df:97:6e:62:0d:fb:e1:2c:0f:25:34:56:
e0:06:98:54:dc:a0:09:e1:71:86:48:9b:ca:34:3f:
14:3c:8d:82:9c:0e:07:63:df:54:51:44:62:8b:15:
54:d1:13:45:a9:ed:52:32:6f:0a:d4:21:be:d4:4f:
49:f7:7e:32:40:4a:73:6e:b2:90:d6:be:45:4e:50:
ac:d5:bb:1f:9a:63:e0:9e:96:56:10:77:57:62:e7:
e3:75:53:78:d6:36:09:f0:e4:6a:c4:be:79:a7:47:
aa:3a:9a:5e:33:9b:33:eb:ba:e0:ff:e1:5a:28:81:
bf:9b:e5:ff:37:e5:22:43:14:b2:b3:1e:10:8c:30:
1e:af:76:04:b3:55:a3:f4:ac:fe:33:96:9b:c1:3c:
d9:48:70:b2:e1:e3:48:13:dd:f0:e9:a6:25:54:da:
85:c0:db:60:da:2f:62:12:0b:dd:c6:01:ed:42:b9:
d2:94:ee:d2:05:ae:91:68:18:b6:98:cd:9c:a5:4d:
12:79:1c:47:b5:cb:d1:e0:72:51:5f:91:f3:b8:11:
79:a1:6a:a2:d4:a6:56:0a:9b:55:42:58:fa:e7:59:
44:a0:5b:84:79:a1:02:32:05:3e:ec:a8:2c:06:61:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:C1:A1:B4:0D:B8:C8:E3:EF:C3:5C:70:05:99:4F:E6:A2:D3:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9b1a1b2-c62e-3238-ab7e-2560d2147fd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.224.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:2f:92:a9:d7:30:9c:51:f6:4c:4d:b4:7e:ce:e3:ca:c0:7e:
e5:05:38:5b:15:11:07:32:69:ec:06:d2:4a:00:4e:cd:21:2f:
67:e3:fc:dd:8c:ad:ac:88:17:84:a4:1c:d3:55:74:a0:3f:3f:
25:32:7a:39:8b:98:1b:f4:95:ae:01:23:3b:4e:cc:23:4f:3f:
98:7a:45:d3:fa:2b:63:a9:2f:37:ce:dd:54:53:6f:93:71:fc:
64:90:cd:45:e2:05:14:f1:4c:f2:2b:9f:7c:13:a2:c8:e4:6e:
20:7f:c8:22:85:47:48:2f:ff:a7:c3:0f:a0:9c:9e:4c:bd:b3:
fd:f3:b3:9f:4a:69:fd:07:47:74:6b:57:da:40:06:a6:be:42:
ea:6e:ca:b3:30:20:5c:9c:2a:29:34:90:84:6d:b4:9a:7c:13:
74:30:17:c7:2e:99:74:3d:19:43:77:c9:d2:7c:8b:64:58:f0:
cd:a3:f1:99:b3:f0:25:fc:e2:09:d9:a3:6a:3f:9d:55:11:80:
bb:53:77:af:21:a1:f6:ce:31:89:21:f4:a9:b6:0a:af:e7:f8:
a1:a6:8e:b0:73:c5:1d:90:5b:96:e2:a2:0f:29:b7:e6:23:19:
c3:fc:ee:1c:28:f1:22:4c:d3:87:07:75:08:88:17:f1:42:c1:
ee:41:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:06 2025 by rpki-client