Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa
File: 2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa (raw, json)
Hash identifier: 8C8h25w82eTwIcHgtey5c7jBZF6Sb0NO+svuLXDlr3Q=
Subject key identifier: 35:CB:97:24:03:B2:A6:34:DB:CA:5A:79:FE:CF:B0:A6:7B:73:DA:0B
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858494CC952121BDB12A247127080
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 11232
IP address blocks: 24.124.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:52:12:1b:db:12:a2:47:12:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=2feb4e60-a1e5-4331-a252-0ada1ebb88a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:af:94:97:90:b3:0a:2c:06:b8:b0:7f:d6:
72:9e:3e:74:3f:3c:a5:ab:0f:76:b9:11:26:e1:e3:
9f:49:70:8e:69:5c:ba:25:7d:9c:d8:fb:b8:6e:36:
ed:1e:27:bf:04:56:52:06:e9:7e:41:ee:3b:84:53:
e8:f8:e1:8a:47:02:83:71:96:64:79:6d:17:37:68:
3d:01:67:38:87:8b:6d:40:ee:c1:51:38:0a:9d:33:
8a:64:d0:d2:13:ef:71:36:35:94:16:5b:6a:1d:f6:
7c:e2:c0:28:90:22:e6:16:4d:85:f2:e4:5f:1e:bb:
95:c4:1a:db:4f:19:ea:b5:23:7b:44:ce:be:24:ff:
57:9d:f7:eb:09:13:0c:4b:1f:a2:09:a4:72:9e:18:
7d:cd:74:0a:60:d9:4a:4c:ac:6a:74:b9:4c:b9:9e:
dd:79:b6:62:a3:c4:b5:62:1e:58:92:8d:82:44:26:
d0:9d:f3:e2:d8:12:1b:ac:cc:7b:9c:0a:a7:7e:3b:
cc:50:33:04:18:0c:bb:59:37:76:5d:12:29:78:f1:
9c:80:42:10:35:c0:16:7c:ff:ce:41:d8:2d:44:05:
c5:e6:99:2e:06:de:7d:0a:a2:64:8f:90:70:15:eb:
63:91:12:85:24:68:0f:d0:37:c9:a2:85:44:99:26:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:97:24:03:B2:A6:34:DB:CA:5A:79:FE:CF:B0:A6:7B:73:DA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2f5e5c5e-b4a8-31c7-a514-b50fab3400b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:43:23:4e:1f:ad:a7:24:78:57:4d:06:b9:9d:df:81:d9:7d:
75:63:cb:3a:0e:0e:7d:6a:d1:49:c2:57:aa:14:85:73:de:bd:
11:25:84:d3:31:2d:ad:c0:01:6a:6d:01:5d:4c:39:ad:18:1b:
38:4f:a3:f2:c5:e0:06:e1:e7:3c:4a:dd:fc:80:ea:2a:e1:ff:
68:eb:1d:96:2b:fa:20:df:c6:a3:9e:75:53:f9:1a:1a:6c:a9:
0d:ea:47:cb:9a:ed:f3:94:c4:c5:0c:e7:76:83:bf:92:e0:8b:
26:2d:09:c2:f0:d8:5b:fe:8c:ab:f5:7b:42:b6:d1:24:86:db:
ee:b1:9b:94:55:86:5f:39:cd:62:f3:94:d6:7d:83:75:d8:ed:
0e:ca:c3:e9:72:f9:a3:73:30:5d:32:b9:ae:79:0b:1c:82:49:
91:e9:2c:5a:46:ef:99:d4:bb:66:7e:03:cd:d5:b5:4d:13:bc:
7e:94:db:de:8e:49:6e:32:ce:f8:08:eb:58:b1:82:6e:cc:99:
2c:37:e5:60:0b:90:d7:67:dd:e6:a6:ad:ad:eb:b5:3c:f3:bd:
26:51:32:57:e8:35:a8:2d:93:45:9a:b3:d0:8d:1c:2f:38:01:
db:8a:1f:95:be:a5:ec:c5:8e:a9:ed:d8:03:06:18:1e:14:11:
8d:ad:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:20 2025 by rpki-client