Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ab2182-cece-3776-95ec-8ff7644e4f93.roa
File: 24ab2182-cece-3776-95ec-8ff7644e4f93.roa (raw, json)
Hash identifier: RrFGZQvwmBVHM9442HLIln0Xe9gPhipi5zELD8MCxsU=
Subject key identifier: B3:21:3E:6F:FC:1C:F8:8D:9B:53:2C:5C:3C:23:51:72:0B:07:F5:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DD05B4CA0D3BD28C42D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ab2182-cece-3776-95ec-8ff7644e4f93.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.233.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:d0:5b:4c:a0:d3:bd:28:c4:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=bb0e2a6b-744a-4501-86d4-504cac57292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:aa:52:f3:49:a2:e1:0d:2c:8e:a1:e7:dd:
d1:93:71:fd:12:06:94:be:41:2a:f2:5f:00:3d:4d:
f0:00:66:4e:23:3b:12:10:52:e9:dd:be:fa:a3:45:
88:fe:6a:0b:2d:e0:34:8e:bf:a4:06:70:3e:7e:8f:
82:b0:80:b1:ff:b6:7a:44:13:72:ae:a0:aa:fd:61:
16:d1:06:af:e2:fb:e7:15:b0:e1:17:a0:47:8f:a7:
40:30:69:52:4e:6c:e0:4d:47:85:ca:de:bd:b7:bd:
82:5a:27:e1:d6:30:a9:6b:49:d2:bf:1a:51:1e:c8:
be:a0:24:52:e9:ee:50:a4:d7:55:c6:dd:b7:fa:da:
5b:c3:e8:55:06:40:4a:32:a3:bd:c0:e9:59:05:13:
5c:2e:06:87:09:17:1d:a6:ac:5d:72:cd:cf:94:66:
78:df:c4:12:78:af:99:38:72:02:df:6a:72:45:5a:
a7:56:5d:df:86:e4:e1:96:d1:7c:a1:14:c5:05:36:
92:54:e7:b1:4c:ba:1e:cc:1e:9f:52:8d:41:05:a0:
b4:5a:cf:ec:89:20:1c:00:73:35:ea:2d:7f:18:fc:
09:7b:ce:81:a1:7f:ec:20:18:33:8d:aa:31:74:31:
2f:d3:24:e8:62:28:41:bb:b3:34:a0:5b:c2:98:0f:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:3E:6F:FC:1C:F8:8D:9B:53:2C:5C:3C:23:51:72:0B:07:F5:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ab2182-cece-3776-95ec-8ff7644e4f93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.233.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:15:a0:fc:4b:99:b4:c1:46:d2:8c:21:23:2f:b1:81:1f:76:
04:01:8d:f4:52:b6:e2:20:a9:11:48:95:93:d7:e5:06:e8:92:
dc:63:3c:57:b3:9d:55:0c:d3:e4:e6:fd:68:1d:04:1c:51:8e:
33:ec:aa:8c:47:72:fe:c5:83:9e:fe:9a:b6:78:6a:de:f2:d7:
15:9c:21:93:7e:b0:8c:f6:cd:00:43:5f:69:90:ef:4f:1c:59:
f7:5b:63:22:f7:7e:ee:d8:3c:32:3e:36:8d:7c:89:72:56:d4:
2c:2a:dc:c4:81:64:9a:5b:d1:bb:05:11:76:48:15:81:d5:07:
25:65:cd:55:7e:29:73:ca:b8:40:0a:7d:74:29:f3:04:9e:63:
5d:0d:55:d0:f5:0f:2e:80:a1:2c:69:7c:b6:e9:d9:84:4b:bb:
80:3c:de:98:9b:b5:18:9a:a7:0d:25:06:50:ec:59:0f:b4:ab:
ff:42:ad:26:7d:6f:e4:2a:e8:27:c0:af:b6:51:72:f4:34:ed:
ff:31:ef:2f:7a:0f:cf:15:9b:04:6b:6f:4e:df:8c:1c:12:11:
17:29:8b:15:49:ff:fa:77:5b:3b:3b:aa:77:32:52:6a:86:fa:
86:45:fb:84:ce:3d:d6:2c:83:42:2f:9a:ce:58:28:e3:12:39:
18:e4:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:09 2025 by rpki-client