Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45188995-c1d5-3665-95ab-0b53524e9c01.roa
File: 45188995-c1d5-3665-95ab-0b53524e9c01.roa (raw, json)
Hash identifier: yqpBuYPHPC/8zxb72h+7+f+fmEg0ynQpJb02HZK9iZQ=
Subject key identifier: 5D:D5:C2:3C:5E:DC:EC:DF:E8:CF:B6:82:24:4E:AF:63:5C:67:9B:57
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12928E1AD5CC898C7F2D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45188995-c1d5-3665-95ab-0b53524e9c01.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.57.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:92:8e:1a:d5:cc:89:8c:7f:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3bf37d84-a1e9-433f-92d9-8488ca0bbf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:f9:70:40:5d:bb:6f:54:5c:04:12:e6:da:
b4:56:d0:d3:3e:a2:61:ac:d8:d9:0e:ec:65:c1:f2:
1b:6d:03:3e:df:19:f0:a1:a1:08:27:f2:2e:06:94:
a5:66:1b:16:65:64:6b:ff:25:a8:45:69:3b:68:40:
bf:89:87:84:f0:17:5a:ab:4a:e6:42:64:a7:a6:ae:
f3:47:57:25:4b:1e:bb:c5:db:1c:a1:65:77:93:f4:
88:bd:63:f4:8f:5e:ce:16:ec:3d:52:21:4a:b4:ae:
91:ed:6e:f8:c2:1c:e9:82:73:71:49:4e:02:15:9e:
d9:3c:3a:78:cb:aa:72:a9:2d:6d:23:e9:5f:12:58:
f3:6d:d3:04:66:45:f1:5d:c2:89:60:84:f9:58:f1:
ce:91:cd:b9:f5:d5:fe:e6:f0:18:bd:96:7f:9d:57:
24:a8:d0:d4:bd:48:ae:c5:43:b0:e3:0c:80:0b:51:
a0:52:c0:0c:ff:5f:cd:8f:7f:cc:ae:ec:83:2e:48:
a5:bc:f3:81:aa:1f:6b:eb:1e:07:80:e5:33:3a:92:
d3:66:a1:f1:df:72:fd:b1:b5:ac:4b:a9:7a:3b:e6:
94:af:ad:e8:7e:98:ef:d5:29:06:6c:ba:51:01:52:
a2:d2:d4:60:8a:5d:78:a6:47:04:41:6c:01:f1:ae:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D5:C2:3C:5E:DC:EC:DF:E8:CF:B6:82:24:4E:AF:63:5C:67:9B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45188995-c1d5-3665-95ab-0b53524e9c01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.57.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f5:93:1e:dc:5c:f6:48:db:77:9e:78:7a:68:23:d4:4b:2d:
b8:58:e6:7a:3a:2b:93:0a:cb:49:ce:69:85:46:74:0a:f1:7c:
fb:3e:a8:03:c0:f1:e3:25:4b:93:99:4f:0c:3d:73:25:71:fe:
e8:e9:b1:52:12:7f:41:40:cc:96:c4:81:d9:c1:62:25:47:d8:
13:01:6b:15:ee:20:7f:40:58:c5:37:43:27:ed:ba:a0:db:3a:
6d:da:c1:13:c7:09:02:90:5f:51:3f:0e:00:71:9f:c0:ac:87:
9c:bd:85:96:18:f8:f0:b6:d6:95:9a:87:15:84:ff:ea:0a:f1:
df:60:3c:97:aa:99:f5:66:c3:c3:b4:32:72:98:43:7d:1d:ce:
08:13:20:8a:24:4c:4e:f8:c4:bf:a6:df:fd:6d:56:3c:c1:f3:
75:ae:c9:fa:1b:9f:25:3e:4c:82:f5:1c:a8:97:b9:73:b1:97:
74:1b:4e:79:cd:05:6e:00:64:14:e7:86:c5:17:76:d2:e8:01:
9f:c3:63:1d:8b:fa:7f:9a:69:20:43:1a:ea:7a:32:c6:c8:84:
91:6b:32:b3:81:dc:93:37:c9:92:6b:d1:c0:12:60:69:47:37:
8c:3f:20:12:de:c5:cc:6b:8f:4c:b3:93:22:1c:a5:86:85:7d:
b3:b5:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:17 2025 by rpki-client