Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19932eea-f911-32c0-8513-74ad3c4f488e.roa
File: 19932eea-f911-32c0-8513-74ad3c4f488e.roa (raw, json)
Hash identifier: SnYv5+IhHMYUXtNSE6GHJyd51vHd2+9AuoKvxgCOwCg=
Subject key identifier: C7:B4:C2:40:8A:FA:4C:8C:31:1B:0E:B6:3B:7B:C3:31:F1:5A:A0:A6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E6112ADA00360F8ECCF7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19932eea-f911-32c0-8513-74ad3c4f488e.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33287
IP address blocks: 69.249.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:11:2a:da:00:36:0f:8e:cc:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=a3f5f792-c9ec-4081-b16d-f552f6a1099b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:2c:f7:51:51:07:08:0d:01:79:3b:83:2a:
44:db:da:4f:97:5d:b6:77:0a:03:af:85:58:47:d2:
03:0d:3a:b0:db:48:14:05:77:4e:ea:7c:43:f5:d9:
39:b8:e7:2f:ec:a0:bc:58:f3:a0:eb:86:40:52:b4:
27:c7:12:00:48:84:55:c7:31:8a:ef:0e:ac:a7:ad:
b4:c1:ae:ec:04:17:c6:4d:9d:c1:fb:45:0e:38:1e:
c5:99:ea:c8:a9:6d:33:57:a1:45:a4:85:bd:6e:72:
ad:bf:27:97:dc:57:18:fb:ce:f8:f9:e1:5b:9b:4a:
c8:1e:59:13:5f:9d:af:6b:57:0e:4e:d5:aa:cc:a3:
37:93:25:c7:83:cc:16:ec:8a:87:62:e0:74:47:89:
c2:a8:28:59:fb:8a:fd:ce:07:57:16:ec:7e:be:09:
71:4d:ac:18:45:af:de:5e:ec:88:ec:da:6b:15:fc:
a9:33:ca:a5:37:4c:5b:3d:dd:16:78:20:f3:77:90:
65:ac:59:50:6d:43:52:0e:f9:50:d4:e3:cd:78:92:
02:76:37:42:24:9a:69:79:3d:e8:9b:92:2b:b4:85:
21:5a:7d:37:3b:8b:10:6a:49:fb:12:92:ad:f6:db:
54:76:6e:83:84:12:f4:d3:52:71:fe:a8:d5:f9:eb:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:C2:40:8A:FA:4C:8C:31:1B:0E:B6:3B:7B:C3:31:F1:5A:A0:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19932eea-f911-32c0-8513-74ad3c4f488e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.249.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:3a:cd:d9:db:1b:2d:d8:87:b0:a9:af:01:72:1b:98:a0:9b:
37:ed:21:75:ca:7c:41:02:e3:4b:cb:90:83:86:e2:78:fd:47:
9d:b0:a5:5b:93:6a:ea:16:0b:8d:b1:33:28:d2:c1:75:17:9a:
08:11:b2:7c:29:e1:7e:be:17:c4:ab:69:06:b5:ad:8e:7b:1c:
34:15:59:35:35:d0:26:4b:92:2d:68:f5:02:94:68:11:72:13:
3d:c9:04:0a:3b:21:d3:29:ec:62:87:3c:ed:e5:59:cc:1d:9d:
44:ce:66:75:4c:20:2e:7d:b4:58:3f:97:c6:05:74:b7:e1:c4:
26:dc:d4:18:b2:fe:94:8a:9c:cb:d2:02:87:60:ad:14:6c:a8:
44:e1:c5:60:b4:25:43:b8:6f:3f:80:ac:03:76:90:f9:5e:37:
8d:3b:ff:bc:eb:46:4a:67:dd:11:32:33:7f:69:39:7e:27:ac:
df:9d:10:ac:df:b0:a1:31:cf:aa:64:2e:02:4b:c3:ca:b1:e1:
3c:94:73:93:ee:56:2d:5d:73:e9:6b:32:f1:9b:14:79:76:00:
e3:60:a5:ad:18:70:70:e6:1b:8e:3f:f3:40:af:51:65:a1:d7:
f1:6c:5a:cd:45:a0:38:0d:54:8c:1c:22:79:85:8d:50:30:89:
a7:c5:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:32:14 2025 by rpki-client