Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa
File: a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa (raw, json)
Hash identifier: oY3ZCAsyL5YqascRSocgMdMBUX426qU6qTLnrgetPwk=
Subject key identifier: 5E:C6:9E:35:97:5C:80:54:70:A2:8D:B8:DB:11:B7:74:12:92:14:F8
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858494CC95255513BA4498D2D3400
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 11232
IP address blocks: 24.124.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:52:55:51:3b:a4:49:8d:2d:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=06fb578f-4dc4-429e-830a-6605ba82c8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:f6:4e:07:2d:6c:fd:ab:c2:6d:21:96:86:
d6:f4:2d:4c:82:51:ea:d2:1b:44:85:93:31:8c:69:
6c:e5:71:ac:57:21:67:8e:59:95:d9:7d:19:b7:69:
7d:bd:93:9d:e3:f4:9d:a5:b1:63:b2:1b:0c:ad:77:
2f:31:91:89:65:54:10:6e:4f:3d:42:c4:59:e8:75:
2d:2f:1b:2b:8b:58:a9:f6:1c:49:42:ff:5e:d6:af:
c2:d3:d6:bf:33:b2:c3:eb:33:40:50:83:dd:48:28:
2a:f4:65:eb:d3:0a:8b:c7:82:c1:bb:22:b8:19:c6:
da:11:7a:95:9b:f9:9e:16:7a:91:e6:78:9e:22:f4:
30:82:e4:d6:aa:9d:45:bd:9c:a5:cb:23:e2:62:75:
56:89:4a:3c:1b:f0:2c:43:04:06:c3:87:29:8e:bb:
4f:02:4e:03:51:d9:23:6f:6b:0f:60:23:d7:75:59:
06:b2:48:f9:61:45:ab:91:be:44:14:35:d5:ac:f1:
2c:63:42:dc:28:00:07:c4:b6:7f:55:15:0f:01:fe:
d2:89:e2:5d:3a:ec:a2:b6:5e:cd:5b:0f:98:bc:d6:
a9:e5:a0:0e:00:81:6d:a1:08:2d:8b:f8:e7:a8:56:
7d:84:29:8b:0c:cc:ec:25:87:3c:2f:a7:7d:f8:bf:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:9E:35:97:5C:80:54:70:A2:8D:B8:DB:11:B7:74:12:92:14:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:27:72:d4:c7:cf:47:96:43:48:76:fb:7b:c5:fa:40:64:3f:
bb:28:7f:72:c5:f4:a7:9b:6c:f5:6c:fb:3b:c9:6b:ef:fa:81:
41:e2:df:bb:ee:29:bd:45:2f:b5:4c:e6:59:eb:98:c1:62:73:
b3:89:8a:08:5b:ee:1d:4a:4b:10:7b:49:1c:be:80:b3:dc:a2:
69:45:dd:a3:e8:e1:46:1f:d8:ff:51:1d:66:78:d9:f1:d5:30:
5c:f7:55:e6:05:1e:13:27:1f:6e:72:07:63:cb:9b:15:be:c0:
f1:78:04:14:6b:9b:b8:00:8d:9d:17:80:ff:11:75:4a:c6:4a:
fe:81:13:4f:f6:6f:4f:44:e8:0e:fe:0b:1c:7f:60:d6:1a:f2:
b8:dd:d1:5c:ed:04:6a:c3:05:6e:d1:c9:e6:b7:c5:92:ef:a7:
76:22:ce:c6:76:76:c0:90:60:20:a5:c4:91:f7:df:8d:63:87:
6e:e5:87:32:0f:4d:cf:04:17:ab:34:bc:b9:a3:cc:74:92:79:
76:92:b7:f9:f7:64:87:68:a2:6e:ce:17:11:61:7f:fc:91:73:
ee:8a:b4:19:ed:c0:a5:e6:03:e9:36:be:60:e7:c5:84:fd:80:
01:de:b8:51:1f:51:af:09:ff:da:63:63:cb:06:36:82:ed:e1:
df:f0:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:32 2025 by rpki-client