Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa
File: f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa (raw, json)
Hash identifier: R5pypkNl4rDQtJtXJ3uHGYv+6pZ23Xoj9yhhuLx+5G8=
Subject key identifier: 1C:15:E0:F2:65:3C:0B:C2:CE:72:44:F5:1D:31:4E:59:C2:1D:45:2B
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584944694C39C099B670C6496100
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.56.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:4c:39:c0:99:b6:70:c6:49:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=85226785-0d3b-44e8-999e-a8cda9e4fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:96:4a:8c:72:39:ef:47:2a:f2:d3:f9:af:
67:c3:ff:8b:b2:e8:48:b4:05:c9:0f:bd:31:48:32:
7e:01:6d:30:ec:99:19:fb:5b:e9:37:f2:f1:2d:6a:
b6:11:40:28:e9:5d:50:48:2f:4e:dd:c9:c0:36:e7:
0d:7a:76:8c:85:82:3f:b5:7f:cc:43:cc:71:2c:6c:
65:a8:5c:f5:b4:f5:c3:cb:81:6c:69:5d:d2:1b:10:
ea:fe:a4:62:65:4c:b6:2a:05:9e:04:24:aa:69:27:
12:05:8b:62:e6:04:1c:b7:04:a7:d0:01:fd:54:79:
40:8b:7e:27:92:c9:81:20:97:f2:6a:da:f0:36:7c:
62:dd:bd:22:49:63:92:64:99:f9:74:c6:21:00:e3:
07:a8:1a:0f:1e:10:c4:64:54:74:07:49:5f:07:0a:
62:59:ae:16:e7:9a:cf:96:23:4e:51:49:bf:c9:1a:
ab:65:95:a0:6e:9c:9b:58:76:56:65:3b:b9:cc:31:
77:1e:b8:73:9f:50:42:c7:63:c3:bb:03:65:73:54:
cf:75:cc:7e:61:95:86:fc:ed:c0:46:f8:79:c5:c8:
57:84:22:38:45:3a:0f:f6:2d:44:7a:d0:73:e9:32:
64:1a:40:b4:1c:f8:3f:7c:ce:12:10:65:0b:cb:62:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:15:E0:F2:65:3C:0B:C2:CE:72:44:F5:1D:31:4E:59:C2:1D:45:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:8d:22:d3:9c:71:1b:e5:56:39:e7:35:5e:0c:4c:e9:a3:fd:
68:5c:08:b3:04:bb:61:e3:85:88:60:d3:8a:ea:83:e5:68:62:
a0:05:3a:7d:23:23:fa:4d:ce:23:cc:e0:d5:c7:03:2f:6c:4f:
72:41:43:65:1c:33:33:ed:0d:04:9d:de:a7:24:d3:af:13:ea:
b3:cd:a9:bd:6a:4e:0b:a0:2c:c1:c4:a6:c4:73:83:c9:48:2b:
29:4b:48:99:2a:da:93:62:6a:72:4e:b7:9d:1e:a2:82:a3:eb:
e5:eb:18:fd:f7:ae:09:49:4c:a6:b2:6c:71:c7:73:fb:9f:73:
1b:9f:2e:42:4a:4c:6c:57:62:09:5a:7d:3a:84:55:12:c1:40:
df:27:5e:f2:c7:3e:5a:f1:58:ce:46:b2:d4:33:11:12:4f:b7:
5f:06:90:9a:f7:7b:3d:a7:98:a6:1a:e4:77:d5:09:b6:a4:ac:
a6:cf:75:ea:f8:c1:86:5d:5c:dc:3c:b3:b4:93:17:85:4f:68:
88:14:21:aa:ab:64:8f:f0:b9:3c:0c:c1:2f:ef:e9:1e:07:3a:
eb:b0:08:df:19:41:85:c4:5d:78:6b:f7:2d:23:1c:3c:00:b5:
b1:fc:01:07:1c:56:9f:a7:84:d6:c3:69:23:d0:4d:83:ec:8e:
7c:2b:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:56 2025 by rpki-client