Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420a14a2-8692-34b6-8a06-08d1c09ee44b.roa
File: 420a14a2-8692-34b6-8a06-08d1c09ee44b.roa (raw, json)
Hash identifier: zJKfXpfyP2Zccjho0F9iisyWpUaPHNrDhVezK8Lm1O8=
Subject key identifier: 5D:99:19:3E:65:DD:BB:3E:2C:02:31:ED:1F:A9:31:F2:BF:38:1E:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1277A6B2E3785623CF5520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420a14a2-8692-34b6-8a06-08d1c09ee44b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.175.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:77:a6:b2:e3:78:56:23:cf:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=42098bcf-8a7c-4cc0-83df-c703d243a376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:58:2f:fa:7b:fc:97:78:41:ea:19:d6:e4:
00:91:2c:89:f9:54:d7:85:8b:13:cf:57:fd:53:ac:
fe:a0:0d:9b:9f:7a:3f:1a:bb:53:04:bf:e5:e5:37:
64:05:21:43:74:22:0d:32:ec:46:59:d8:b1:51:5e:
2a:76:e8:2b:d7:e6:4d:b7:27:cd:b7:5d:4a:bb:9a:
1e:15:c9:4b:83:2e:a5:16:28:b5:c4:85:38:d6:a8:
70:d9:2d:7e:1e:88:4d:14:82:b4:9a:13:99:09:55:
af:62:25:56:c4:a8:83:7e:46:4e:5d:5f:df:db:fb:
6e:f5:6a:0d:28:56:ab:ec:57:22:90:1a:c1:19:b0:
5c:57:8d:de:7d:bd:c7:84:11:85:a9:49:d8:31:86:
66:8f:f7:15:ea:02:c6:e5:67:ad:99:9e:71:31:34:
1a:fc:f3:27:70:1e:4e:01:4b:83:bb:60:f2:fe:26:
3b:d9:7b:a0:5e:e1:87:56:43:a9:d0:be:f8:84:bd:
e4:15:1d:57:6e:3b:8e:37:5c:44:7c:7b:da:80:ed:
b6:fe:44:37:79:ee:ee:31:6d:91:c1:6c:99:01:2f:
aa:35:5f:82:ec:50:25:42:4e:c6:c3:2f:9d:98:68:
d6:8c:e4:5a:ef:e6:9b:c7:5e:79:0c:ce:ff:a0:08:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:19:3E:65:DD:BB:3E:2C:02:31:ED:1F:A9:31:F2:BF:38:1E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420a14a2-8692-34b6-8a06-08d1c09ee44b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.175.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f8:ff:92:8a:3a:28:b4:d4:cc:3a:e5:fd:89:ce:22:54:b4:
0f:49:fc:4c:2a:cf:d8:6a:be:0c:2a:e4:45:1c:0f:db:d6:f0:
36:a4:c4:6a:53:c3:72:43:e0:87:77:14:a1:50:4a:7d:a4:ed:
2d:aa:24:4f:ab:b1:17:d2:98:c3:47:59:0a:dd:3a:cb:ff:5a:
a1:ff:e7:56:30:bb:35:30:e6:26:c6:9b:5e:e9:ce:ad:01:e7:
f2:95:aa:8b:b3:97:bd:af:11:e3:36:80:8c:81:b0:45:b4:56:
bc:0e:bc:7f:0c:df:b8:75:cf:c5:37:0a:f1:23:8a:7d:65:12:
5a:97:53:ea:ad:56:f2:80:58:c2:fc:37:c5:fc:5a:df:95:e5:
18:b2:cc:03:a2:49:dc:84:88:06:6c:79:84:2d:cc:a8:37:9c:
cd:b6:c8:a8:dd:ea:87:41:8c:fb:3b:cc:72:bf:46:6c:96:2f:
92:b0:bb:8e:fe:02:07:ae:2e:c4:2f:bb:c6:3e:cb:1e:d6:e0:
18:54:87:a5:44:a1:7f:ce:97:78:d3:6e:83:6d:37:60:a4:19:
e7:fb:c5:70:d8:22:1b:da:18:67:bf:d5:17:fc:da:17:84:2b:
1a:a2:f8:04:a1:de:d1:59:d1:57:b5:bd:87:93:c4:47:57:14:
5f:46:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:41 2025 by rpki-client