Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2afdb02a-bf4c-3b30-bf45-ec43028b15af.roa
File: 2afdb02a-bf4c-3b30-bf45-ec43028b15af.roa (raw, json)
Hash identifier: h0aXEfBzsmmPKjV7AJsSA5wLkwz3Yua6fI2XpOPka0Y=
Subject key identifier: C9:38:EB:8D:6E:72:32:FF:82:F1:64:2C:FA:B3:74:76:24:7C:3D:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814402F5EC8312F57F66A2800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2afdb02a-bf4c-3b30-bf45-ec43028b15af.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 76.30.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:2f:5e:c8:31:2f:57:f6:6a:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e8967057-4f17-415a-a26d-98cc66e91b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:47:c3:83:4f:17:14:1e:4c:60:bb:da:db:
98:73:43:2e:53:5b:12:d9:cb:15:35:e3:b9:28:82:
dc:68:10:76:72:2c:f7:6c:75:b1:9f:2b:ae:38:5f:
2c:12:85:f9:a5:b2:2d:03:55:03:ab:10:a4:58:10:
5b:a4:1d:a6:5f:0f:1f:5e:27:97:8f:55:a4:da:41:
a0:76:3b:17:67:40:55:8f:f0:c7:41:60:a5:bb:22:
5d:11:a6:42:b9:ee:5b:75:ff:66:48:b9:7a:d4:d6:
22:d3:62:35:41:e9:8d:47:cc:84:20:55:89:b8:d1:
d9:4b:9d:19:da:a9:39:90:ff:df:38:b3:c7:3e:3a:
c6:8c:49:65:9a:f9:70:01:a2:ac:1b:73:5f:d0:98:
e2:29:07:ad:73:8c:ca:07:6c:28:8e:68:25:ef:09:
c3:93:01:23:2d:a1:34:79:52:7d:21:37:9f:9a:71:
f4:c4:b9:83:00:87:30:9e:f6:ad:4e:25:3e:95:b6:
2f:6d:c5:ef:09:da:31:6f:18:68:6b:0c:92:06:4f:
d7:b2:cb:7c:2c:71:38:cc:f0:37:f2:9a:78:ea:03:
16:23:3d:d5:24:e8:8c:ac:ce:d6:26:97:97:82:42:
3b:dd:e2:a4:88:25:85:7d:15:92:f6:00:62:0c:60:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:EB:8D:6E:72:32:FF:82:F1:64:2C:FA:B3:74:76:24:7C:3D:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2afdb02a-bf4c-3b30-bf45-ec43028b15af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.30.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:70:c4:71:51:a2:57:e4:bb:4e:91:42:bb:74:e9:50:7d:0e:
8a:45:40:c1:fe:fd:71:83:a1:c6:5a:14:1e:13:00:ed:74:a4:
b9:25:99:33:24:c6:66:08:5c:db:30:3e:17:f3:9e:51:76:88:
ab:84:84:88:2a:62:ec:52:fb:f1:30:79:89:8d:3d:1c:a7:99:
ef:6e:24:31:8b:e7:6f:58:2b:ff:73:86:0b:64:1d:33:83:f7:
7c:46:9e:b4:b8:42:cd:dc:04:0b:1f:f8:7e:ce:de:da:85:66:
bf:19:ae:d7:91:d9:c4:a7:22:a5:25:7d:4a:c6:50:69:bf:4b:
e6:bd:37:48:e2:5f:a3:ad:4a:4f:ba:8c:5a:bf:c9:53:ff:ff:
01:43:8b:bf:1c:38:66:79:00:ba:da:a1:6c:8c:12:65:45:7e:
35:3d:69:4e:ef:6c:c8:e5:50:89:ba:e8:b0:9a:45:7f:97:b3:
d5:94:f4:c9:43:5d:f9:04:9a:3a:74:04:91:40:04:3d:0c:e4:
0b:79:c0:31:d9:00:b1:13:08:09:a8:de:e5:04:8c:5f:06:32:
3a:cf:45:55:fe:43:34:a0:f4:f8:d3:0e:65:a0:26:74:37:01:
1e:0c:51:7b:8c:17:39:c9:0e:c3:c4:ab:18:1c:f0:bd:ef:1c:
39:eb:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:26 2025 by rpki-client