Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3139ec03-b249-3376-bbfd-316a2a359fc5.roa
File: 3139ec03-b249-3376-bbfd-316a2a359fc5.roa (raw, json)
Hash identifier: Xs5OqMgB2xdt1+9EYl22NHo4t4dmfFLC7qU6Wv90gfI=
Subject key identifier: F2:C3:CE:A4:5B:DF:CA:FA:14:1A:DF:8F:07:F8:80:5B:63:79:0C:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10BABBFFF6B152B3678770
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3139ec03-b249-3376-bbfd-316a2a359fc5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 174.173.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ba:bb:ff:f6:b1:52:b3:67:87:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a175238d-4abb-4bd5-ac6e-f4271d06abdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:05:b5:d9:fd:c1:45:81:58:24:27:96:47:
59:6b:60:39:66:d6:fc:6a:d6:d7:bf:36:68:34:55:
20:8c:aa:12:52:dd:61:ce:52:72:40:48:77:2d:db:
97:4a:39:32:2e:c5:3e:7c:b4:01:e1:73:28:2a:84:
e8:3b:87:0c:41:99:05:2e:c9:89:87:14:cb:f0:fc:
a6:8c:19:ed:5f:ac:46:c7:27:c5:0a:54:42:a4:aa:
f1:b4:3c:24:58:dd:98:ab:1a:21:b1:67:e7:0e:07:
2b:55:59:72:b3:bf:a9:0e:a8:18:dc:a7:13:44:96:
f4:b4:c0:35:bb:4d:4c:a9:70:91:a2:40:17:6e:36:
aa:0d:fe:71:a0:3c:df:9e:5f:2d:e6:e1:b4:0a:32:
b1:d2:42:f5:23:f7:63:a1:77:25:1c:e1:a2:db:b5:
81:36:f8:f3:41:8c:77:63:55:29:01:46:ce:ed:49:
77:03:d7:17:d2:cd:b5:c1:08:35:02:82:9e:3e:b9:
8d:14:e2:25:7b:d3:ee:48:ce:4f:62:7f:39:94:09:
89:70:54:96:2f:06:e4:b6:2a:19:6e:7a:0e:04:66:
a7:89:a8:14:7e:9d:35:fe:90:1c:c4:57:ef:aa:1a:
aa:89:d6:1f:6a:71:d3:65:b3:8d:0c:0a:20:36:80:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:CE:A4:5B:DF:CA:FA:14:1A:DF:8F:07:F8:80:5B:63:79:0C:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3139ec03-b249-3376-bbfd-316a2a359fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ba:0a:82:fa:62:25:6f:7f:e3:30:8b:cc:58:95:15:38:7e:
16:c9:bb:ca:13:92:9b:1d:5b:5d:69:8f:61:d7:36:4b:bb:40:
c3:cd:29:f9:9f:01:24:31:69:73:2a:ca:60:4a:27:a8:f1:1b:
90:b6:30:4e:92:b6:78:18:e5:bd:9d:c6:b2:d1:cc:49:e7:4c:
a2:5f:b2:15:65:4e:46:af:0b:d5:f5:a8:e6:e4:21:85:14:62:
7b:56:e7:f5:30:f3:a1:ad:e9:12:a9:9e:cf:fd:dc:b1:e7:0d:
74:ab:dc:dd:e3:e7:f7:a7:eb:ff:73:e7:36:12:24:35:da:c4:
91:11:9b:46:6e:ab:32:1c:74:10:ff:28:bc:7a:1b:6e:46:c8:
4a:09:58:aa:a3:09:95:94:47:f0:b5:1c:1c:de:52:89:af:d4:
ea:a0:6c:6e:09:3d:29:58:25:ed:53:d7:ed:18:f6:10:1a:08:
89:5f:50:da:f6:6a:9d:3a:ef:cb:db:79:3d:78:55:c1:61:7b:
df:f2:fc:03:e5:f6:f6:7b:3c:0d:23:9f:54:ba:b0:87:fa:b7:
b1:17:65:64:78:1d:09:26:7b:f7:a1:5d:1b:f7:a8:99:46:fb:
55:57:a7:c0:4e:ed:7a:7c:49:bd:ec:c0:6b:f4:a9:48:94:c2:
80:0d:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:03 2025 by rpki-client