Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
File: a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa (raw, json)
Hash identifier: 4idAQxOXDjE7kGa/4C+5Fh2tya8wZjO2IWUQOzZr6e0=
Subject key identifier: B3:64:A7:CA:2F:1D:02:E3:5D:21:66:CC:01:CA:0E:ED:AA:48:14:5E
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285849446947AB204251AFADFDD380
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.53.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:47:ab:20:42:51:af:ad:fd:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=bf01e1d3-2d0f-4cac-9ad8-7e374df95532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:34:f8:ee:e7:1f:1c:3c:fc:4f:c6:6e:32:
2f:7d:3a:66:ff:e2:e2:62:c6:19:9a:c4:2f:da:cf:
17:bc:f9:76:d0:64:ef:f7:dd:9d:33:53:1a:ec:3d:
d2:b9:41:27:ea:61:dc:90:bb:0a:4e:75:47:fa:09:
99:86:62:eb:4c:46:00:9e:e1:7e:83:88:34:b1:c2:
d7:cf:d6:cc:4e:2b:13:66:96:ab:a3:28:44:40:a2:
30:c4:ac:2f:7f:d5:53:3f:5f:d4:fd:17:75:7d:09:
f2:c2:50:c6:b8:50:4a:96:8e:2c:7d:6b:fb:e7:eb:
af:5a:83:ce:58:1a:e2:9b:1e:1d:a3:1e:d2:ac:95:
ac:1b:b6:13:30:7e:fe:92:bb:04:e1:ba:4c:33:25:
17:38:88:1c:60:09:44:98:59:35:7c:b2:e9:e6:e0:
c8:15:f1:d3:eb:51:f1:37:cb:60:b6:d8:bd:ea:97:
bc:66:92:32:e4:b8:da:d1:52:e0:3e:08:86:5d:7e:
39:bd:4d:14:51:e3:7d:4e:a4:80:34:63:7b:ad:47:
c1:78:3f:c8:8b:4e:7c:74:8b:ef:20:ed:85:dd:69:
40:b9:5b:06:7e:70:8b:94:1c:35:08:30:e4:f9:a9:
33:52:f2:fe:3f:9d:d4:a8:b5:b7:bb:12:3d:59:bf:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:A7:CA:2F:1D:02:E3:5D:21:66:CC:01:CA:0E:ED:AA:48:14:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a6de98c3-9e40-3110-81ee-3d7d04f0c0b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f2:10:8f:0e:84:04:5f:a6:f4:cb:d1:39:29:38:44:6d:14:
2e:63:ee:c6:cc:52:bd:99:79:67:4c:1a:be:71:75:21:a1:9d:
16:2e:f0:f4:2b:f7:5c:5a:32:f5:67:5d:22:9a:ff:c9:f5:ad:
02:79:48:b2:f6:3a:d5:04:de:53:29:0e:ed:50:49:f4:38:07:
cd:05:ba:2f:c6:2a:74:ce:aa:1c:82:ab:b9:e0:10:8e:33:fb:
47:a6:c0:8f:77:ec:eb:e9:eb:e1:bd:c5:6a:4d:0b:81:d1:e9:
1d:e1:81:c7:a5:f8:8a:70:57:d8:6a:4c:c8:d8:a4:ce:5e:99:
15:04:23:73:60:ee:3c:ed:02:81:3f:a6:70:43:93:13:91:fb:
d6:c1:d3:30:d5:23:8f:a9:54:a0:bd:61:88:e7:c2:a5:e9:2e:
36:32:d9:54:e7:03:6c:d2:fd:7f:01:00:b8:aa:09:e3:ed:29:
7c:93:fc:7a:54:87:63:5a:56:20:c2:3f:57:9f:9f:f9:50:b7:
fa:a6:e7:2c:00:b7:5e:68:aa:37:fd:26:a5:22:56:0c:c6:c5:
5f:82:0b:d9:a0:40:22:69:af:58:7c:dc:5a:3e:3e:b3:c0:8e:
e9:6d:c7:bb:6b:7e:61:8a:4b:08:91:a4:0e:23:25:5d:f7:5d:
83:6a:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:05 2025 by rpki-client