Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd0f3f09-afdc-37b4-991a-d4884e0aea1a.roa
File: fd0f3f09-afdc-37b4-991a-d4884e0aea1a.roa (raw, json)
Hash identifier: WMN1yq4O/+hxU3tMILVVFNUxq7e8R7msEwt3x2aqB54=
Subject key identifier: 59:80:F3:30:CB:31:4A:DE:45:23:1A:0E:B6:D1:CB:A5:C3:AC:73:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8D0B930CAAF2929387200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd0f3f09-afdc-37b4-991a-d4884e0aea1a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 24.127.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:d0:b9:30:ca:af:29:29:38:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d29ec88b-ed86-4254-8c70-48d75262d188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:4d:76:64:6f:e4:1b:4c:58:63:58:5b:cf:
f1:cb:06:94:1c:89:8a:af:ad:68:2e:45:76:67:1f:
cf:18:08:ec:8c:b2:96:32:d3:53:03:45:f7:b3:6b:
40:c5:44:e7:f9:e3:da:22:78:33:11:28:6e:0e:12:
a7:e6:d3:e7:01:1e:5e:2c:d1:7a:aa:ec:93:29:70:
3c:51:b8:e7:11:4b:68:28:d0:ab:d2:cd:4e:d9:33:
14:68:b8:f0:44:dd:02:84:c2:6f:55:c8:64:99:ae:
55:30:19:82:ed:8a:6c:d3:f7:be:ad:6e:95:8b:53:
f1:fa:31:b2:39:2f:6c:ec:6b:5d:c3:bc:19:37:a3:
9a:64:02:62:25:6c:be:66:de:bf:63:f5:2c:5b:81:
97:98:f6:b6:47:08:ba:1e:d8:67:6c:cb:d4:01:a2:
2d:8e:85:02:2c:72:72:a3:65:bb:58:81:21:e8:dd:
6d:60:17:1a:a1:ca:53:30:53:63:2d:01:eb:06:64:
fc:60:7b:59:48:41:91:52:37:87:24:b3:9e:9d:b4:
82:80:66:32:b5:45:a1:23:52:a9:9b:83:a3:05:28:
53:b4:b2:5b:e4:1f:13:ab:a7:d5:ab:2a:ea:d8:d7:
34:48:bb:66:a8:e3:df:05:9d:81:20:4f:52:45:de:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:F3:30:CB:31:4A:DE:45:23:1A:0E:B6:D1:CB:A5:C3:AC:73:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd0f3f09-afdc-37b4-991a-d4884e0aea1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.127.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:8e:21:35:26:f5:82:4f:84:7c:32:0c:d1:ac:e2:ae:90:19:
dd:82:a6:0e:e7:7d:f5:e4:03:5a:1c:80:91:c3:96:a6:65:8f:
7e:3d:e6:7d:9c:84:d5:85:31:c5:78:43:40:21:0e:16:6c:3b:
f7:4f:0c:72:f2:73:6e:c5:c6:e3:b7:b3:e3:d9:8a:76:63:eb:
20:73:b3:14:55:53:55:10:b5:6b:65:ad:b1:07:35:9e:66:61:
c2:23:5b:5a:b4:8d:01:ea:0b:32:bf:e2:c5:d7:fe:61:9f:9c:
60:cf:6b:29:52:5b:46:43:f7:1f:d7:ee:68:e5:58:a6:d2:8f:
e8:d9:f4:35:d5:82:a3:0f:88:12:8e:62:88:c2:e5:87:6e:ae:
87:c5:ef:fb:88:c5:e1:c2:9d:59:6f:61:4a:25:fd:05:da:5f:
14:ef:86:9e:ab:1d:9d:da:87:4e:c9:5c:87:11:59:51:b3:86:
50:0f:38:08:6a:31:90:b0:77:41:fe:4c:29:a4:ef:5d:8e:36:
c8:e4:cc:5d:e3:48:a6:ff:6b:f4:79:ff:24:2b:09:0d:27:b1:
9a:2a:b7:2f:39:e7:62:c7:70:f5:6a:7c:ca:1c:d5:9f:e8:51:
f1:07:f5:88:a5:25:b0:41:6b:2b:40:68:a0:7e:e0:d2:1a:07:
88:90:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:42 2025 by rpki-client