Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f73af21-b20f-3757-87c6-70a3c6e4c52a.roa
File: 1f73af21-b20f-3757-87c6-70a3c6e4c52a.roa (raw, json)
Hash identifier: 3GYDIYxayxGLHfy6JZUIl6WWK+WVxN0YI9Vnjv0vi5M=
Subject key identifier: 48:4C:B1:47:E3:C9:4E:68:29:E0:E5:E7:B3:CE:99:70:A9:A8:D9:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AE455610C22B8B66C7C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f73af21-b20f-3757-87c6-70a3c6e4c52a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.235.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:e4:55:61:0c:22:b8:b6:6c:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c8052c79-ebfa-40ad-af4a-faad8ec7345f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:f0:a7:4f:df:44:dc:9f:d2:7a:a6:db:c5:
85:c4:b3:7a:67:69:87:4f:60:f3:ad:e1:61:9f:ab:
16:6e:7c:d6:28:ff:1b:f7:c4:56:10:2e:0e:34:31:
c1:bb:a8:59:54:be:42:6a:6c:41:23:9c:40:2f:83:
8a:99:c3:05:26:b7:40:a1:81:19:ed:b4:ec:f1:a2:
88:39:13:b8:52:9f:71:a9:20:f5:18:c4:fa:1e:62:
bc:8a:77:1c:15:bd:2b:26:6b:08:5d:6d:ad:d1:b4:
f0:f8:85:f8:80:b2:98:12:f1:e0:a8:f2:09:eb:8c:
3d:35:47:18:25:b4:a1:02:e0:9e:42:f5:81:f5:35:
44:6a:0e:b0:6f:a9:aa:e2:20:99:c7:de:12:b5:85:
1b:c5:b6:68:7b:c9:5f:c9:0b:82:3a:31:4d:0b:a7:
5b:3c:64:98:b2:43:f8:11:13:5d:0e:12:66:9e:d4:
ff:1a:57:7b:79:27:39:3e:7b:99:0f:31:04:87:b8:
92:62:7b:d6:46:14:af:6d:fa:1d:a9:a2:53:b6:64:
39:05:8d:f5:ae:9d:e6:67:15:ee:d0:13:d1:84:3c:
66:be:5b:d0:d1:0f:87:2a:58:8d:6c:46:13:de:b4:
c8:21:33:01:9f:67:5d:9f:16:58:4b:2d:bf:33:e0:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:B1:47:E3:C9:4E:68:29:E0:E5:E7:B3:CE:99:70:A9:A8:D9:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f73af21-b20f-3757-87c6-70a3c6e4c52a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.235.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:74:47:ba:22:d1:53:f5:51:78:7d:35:6f:04:58:85:97:9d:
b2:bd:9b:44:26:bf:d3:17:64:aa:ac:2f:84:ba:eb:e9:ae:45:
8f:ba:b8:e8:9c:c0:ca:04:37:ab:bc:97:ef:ec:fc:7d:b6:e8:
e7:72:15:62:49:01:41:ed:1e:ce:f6:6c:d6:75:29:e8:3b:b0:
89:d2:54:dd:be:70:99:6e:fb:83:15:38:9a:a9:32:ed:71:d9:
06:59:4d:4f:5c:b4:9c:73:df:2e:fb:24:8d:b7:35:c8:a7:2c:
1f:71:bd:36:d2:3c:c2:39:01:85:1d:50:40:bc:a5:4b:e5:f7:
0a:6c:e7:17:b5:3e:0c:2a:28:ec:4b:4f:04:63:6a:43:7a:a7:
6a:1f:f5:84:0e:dd:18:1e:a0:30:1e:49:e3:42:06:7a:47:8e:
73:0a:d1:86:c4:b9:90:b3:ac:6b:f9:9f:e6:97:55:c6:58:78:
d9:d4:63:79:8a:6b:39:3e:f1:72:3d:eb:3e:8b:b8:19:54:c2:
a3:4e:7a:22:12:a1:71:df:76:01:e2:69:05:cf:3b:c3:82:d1:
58:e5:c4:ed:f5:b3:9e:bb:1b:b2:d8:f0:19:7d:a9:37:70:b9:
5b:62:46:5f:63:77:c0:f5:bd:1d:b9:5a:f7:95:ec:d8:ea:12:
e9:3a:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:50:06 2025 by rpki-client