Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa
File: 27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa (raw, json)
Hash identifier: GyikcwNltLBXPK3RbNlx4mIEYS3v6dBdaUDU2Ajhm18=
Subject key identifier: 00:29:2F:92:EE:91:B7:C5:A7:28:12:CC:29:12:53:D4:75:7B:28:12
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F43285849446936A8F658F7B8A19CB680
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 13807
IP address blocks: 24.223.96.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:36:a8:f6:58:f7:b8:a1:9c:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=79df5a5f-c79e-4dd1-99a6-01ddfb77f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:96:3d:fb:ab:7b:3e:43:6f:4d:25:a8:cf:
f8:66:80:be:bb:fa:57:cc:d9:1c:5d:b6:35:a2:b9:
33:cf:6d:ac:c7:87:a1:58:d9:83:89:2d:3f:33:ad:
07:a2:fe:85:cc:65:19:e1:75:d8:1c:d7:1c:50:3c:
57:2c:66:d0:8d:c9:56:d1:db:81:00:a4:b9:49:78:
27:be:83:64:28:48:aa:bb:58:8f:be:2a:54:03:5a:
c7:9a:fd:f3:96:c9:0a:4f:ac:5a:34:85:99:35:c9:
56:7e:c3:d3:36:7d:3c:6b:3e:91:33:05:ec:8e:80:
e8:5d:cf:1d:69:e8:60:b3:97:42:82:a6:38:8d:e1:
44:b0:6f:c7:19:01:83:df:66:d9:25:e2:d8:77:a9:
2a:ec:93:fe:2f:af:2c:2c:e8:4f:79:24:db:08:90:
14:60:4e:dc:de:1b:21:34:5e:ae:a5:0d:a0:aa:64:
46:1c:98:bf:9c:1a:1f:1c:2a:bc:59:6a:a5:e8:00:
3a:0d:bd:d6:65:5e:47:f7:6f:72:38:83:2f:5e:55:
24:06:73:70:58:a6:2b:49:8d:c8:5e:e4:24:b9:67:
45:ea:b3:ce:bd:88:31:62:b0:a4:cb:12:51:f3:e2:
1c:a4:51:22:37:88:56:55:6f:a8:ff:bd:81:94:f3:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:2F:92:EE:91:B7:C5:A7:28:12:CC:29:12:53:D4:75:7B:28:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/27dc152d-91a3-3a1d-a934-8ca2c78e2421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
24.223.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:10:85:82:25:ee:c5:c3:52:3d:33:b5:9c:99:73:2e:35:34:
88:d9:03:db:7e:9f:a7:8b:07:a6:80:87:5b:de:84:60:64:dc:
fd:d2:33:2f:bd:89:49:88:67:52:ab:07:03:c1:c4:6e:5c:c3:
9b:5f:1e:8e:4c:7f:c3:e4:1e:4f:73:04:91:d6:8f:49:b1:1a:
84:6b:b0:69:47:90:04:46:b6:09:0a:2e:65:b2:a4:a1:64:af:
13:56:3b:96:a1:55:9d:b5:f1:c6:d7:7c:de:8c:62:b3:f5:cb:
13:e2:45:69:4c:16:75:42:a8:ab:e7:7c:6c:69:be:d5:dd:f4:
05:62:f5:03:11:14:b5:40:fc:ca:b9:a3:c2:8c:44:58:f4:a8:
f7:de:67:49:bd:ea:2c:2d:d5:89:c1:4c:da:f2:47:d6:96:14:
36:23:c4:fd:8a:23:10:9c:23:33:98:37:b4:35:bc:71:db:d3:
f5:0b:d9:8d:7a:18:4c:55:41:f3:49:79:cf:d2:c8:30:a7:75:
7a:46:df:b8:9f:e6:1f:d5:a7:0c:ec:44:c4:12:41:a1:13:4d:
70:e9:54:78:eb:b9:86:0a:c1:7c:01:f8:4f:45:15:13:cf:2f:
b4:ad:57:d0:4f:cc:ec:54:78:bf:f2:bc:99:71:4d:e8:c8:24:
4c:fa:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:03 2025 by rpki-client