Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393241d2-cdb1-3156-ae98-ba5af2ec6daf.roa
File: 393241d2-cdb1-3156-ae98-ba5af2ec6daf.roa (raw, json)
Hash identifier: rlfn2B42zA0UzJxN4KNHoHbmLh47KCoCSIagRSVv1LE=
Subject key identifier: A8:3F:4F:C6:8C:DF:20:1D:96:48:B9:94:EB:8D:26:C5:07:CE:E1:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10429B2667D46233E778A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393241d2-cdb1-3156-ae98-ba5af2ec6daf.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 71.199.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:42:9b:26:67:d4:62:33:e7:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=155a9a61-cf8e-4255-a226-5581fff10e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:8f:ad:1e:9d:17:aa:dc:ec:0d:22:13:b1:
21:26:f1:b2:be:91:14:c8:da:47:1c:16:48:38:30:
6d:79:b0:0a:45:3a:04:b3:a1:11:b4:8f:21:b4:52:
45:e5:0f:c5:d8:1e:0f:41:4a:d8:21:ea:d9:df:16:
6f:2e:22:21:76:c9:51:7a:2a:d5:06:ed:a0:c2:f3:
de:02:b4:76:ed:ab:3b:bb:d9:0b:26:1c:8a:00:ff:
be:46:0b:b9:b6:53:7d:a2:05:3f:0a:56:6c:75:31:
96:02:47:a8:0c:de:e7:b2:f4:ab:b9:8b:47:aa:0b:
a9:d9:39:ea:49:16:4b:b8:4f:17:6d:86:7e:f1:5d:
f3:d1:67:a1:ab:4e:60:04:dc:29:81:48:63:06:03:
0b:f6:b5:a9:83:7f:75:82:63:38:ee:1e:25:31:5b:
29:cb:a7:51:cf:30:be:ff:0d:f4:89:5f:27:fb:06:
b1:36:35:4d:5c:58:5b:89:ee:58:2b:a5:0b:de:dd:
d6:50:5d:62:2e:d2:50:3f:ee:65:b4:35:c0:44:10:
cc:d1:bd:45:f9:7f:9a:c3:89:f4:f3:a2:5b:64:7e:
cc:ff:1f:ef:42:ba:dc:08:d3:c0:89:1c:32:ac:93:
d4:42:ca:b7:9d:c0:07:e0:16:80:d2:de:42:6c:25:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:4F:C6:8C:DF:20:1D:96:48:B9:94:EB:8D:26:C5:07:CE:E1:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393241d2-cdb1-3156-ae98-ba5af2ec6daf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.199.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c5:70:19:72:d2:4f:72:cb:0f:78:2a:8c:88:a6:6a:7d:45:
83:3e:45:c8:b5:08:97:1a:aa:5a:f8:32:60:c5:ac:06:ec:2d:
21:75:a4:4e:ab:53:ad:08:2b:a5:fb:96:5a:c7:ff:bf:b7:08:
22:82:be:bf:a2:5c:60:6a:4a:ba:4e:89:33:41:04:8a:25:4e:
63:70:66:29:a8:71:e3:08:3d:31:2e:2b:33:be:2b:6e:a4:44:
cb:0e:23:8f:d2:71:f3:e2:82:d0:c4:04:9d:77:b4:d2:89:6d:
9f:67:2e:93:83:c0:21:a7:32:16:0e:2b:07:39:d8:09:b1:cc:
57:a5:7b:5f:00:e3:bc:31:f0:41:2a:2b:52:9f:1e:59:d5:0f:
5e:e2:b0:99:0e:71:6a:43:a8:73:37:94:3a:e7:ae:c9:8c:59:
e7:c1:c5:b5:3d:45:b8:a8:6c:29:0d:ac:e3:da:13:aa:6c:de:
af:9d:a1:62:7c:d1:49:5e:b8:aa:e0:a5:24:08:b4:32:2f:92:
f3:08:37:57:f6:2a:00:40:ae:97:91:29:30:bb:5e:dd:6b:24:
b7:ae:50:2d:28:da:11:7a:7c:75:e9:f7:2f:cb:75:b3:d1:46:
48:d1:0d:8e:a5:69:fe:b9:ed:89:c5:ac:eb:41:8c:7f:cb:04:
e6:f9:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:06 2025 by rpki-client