Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e0e0fe-1381-384d-8134-0e23ace67851.roa
File: 45e0e0fe-1381-384d-8134-0e23ace67851.roa (raw, json)
Hash identifier: N5Kpz9Y5+LjVAHoVUHBymck+PVFMPuS1dyrQagjSDP0=
Subject key identifier: 17:82:74:E1:1C:05:83:5E:2A:79:CD:2A:F1:5A:01:BB:50:C6:14:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11DBFF95865EF43C7DD500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e0e0fe-1381-384d-8134-0e23ace67851.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 71.199.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:db:ff:95:86:5e:f4:3c:7d:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9720dfe8-e370-41e2-acc8-998d0e2574b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:b0:da:01:42:7d:9a:56:46:1f:a2:85:27:
16:96:13:85:4d:72:50:14:47:be:d4:bf:11:b7:59:
9e:c4:17:fd:1d:f2:6b:ea:0d:41:17:01:2d:f0:e0:
c1:79:30:89:98:ea:fc:dd:7a:59:e4:22:44:0f:9c:
8b:6b:90:79:2d:0b:65:d4:b5:0c:13:0e:0d:31:34:
95:f0:c8:08:15:d2:b2:43:0d:c6:09:dc:e1:07:ee:
34:06:d8:e5:cf:a2:08:77:f8:c8:04:1b:7e:1f:10:
fe:b0:68:9a:f1:a6:f8:bf:27:5e:c3:c9:18:d0:e6:
28:8f:79:5c:b7:79:65:87:30:ff:94:d4:03:b1:c7:
2c:c2:31:8b:57:f1:46:50:0e:78:d9:b6:41:7e:a3:
a0:5e:57:86:8c:95:86:cf:9f:77:9b:91:f1:22:c2:
85:f3:c1:b6:47:c1:31:c4:be:47:f8:c2:8f:7c:e6:
2c:f6:2f:97:66:07:ba:58:7a:3f:e1:18:46:da:62:
5e:5d:7f:51:21:29:31:b5:f3:ad:75:ed:8e:6d:9f:
05:73:d3:fd:50:15:02:62:da:5c:ae:af:f7:e6:87:
a1:1a:9d:b5:a9:a2:6d:16:e5:58:1b:b0:ac:8b:0f:
df:22:d6:da:6f:c7:51:81:65:4c:6d:3f:7b:d4:ca:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:74:E1:1C:05:83:5E:2A:79:CD:2A:F1:5A:01:BB:50:C6:14:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e0e0fe-1381-384d-8134-0e23ace67851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.199.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:f3:ab:35:b7:0e:89:64:ef:1a:49:78:29:e3:12:c0:01:ee:
b2:8f:74:76:e9:d3:c6:0a:38:72:34:67:c7:16:e4:94:38:85:
6d:10:d0:2d:06:dd:b3:03:11:8c:47:7b:36:f9:74:04:5b:98:
c1:a9:0c:23:58:55:38:e9:cb:96:73:ca:20:c4:ae:80:be:6f:
79:50:06:1d:d9:54:13:75:4f:a3:c3:ce:fe:76:16:41:56:01:
2e:6b:71:97:98:23:bf:b6:ea:72:7d:13:ef:21:e8:c6:04:da:
b0:e2:1d:07:f1:bf:c4:06:93:20:ab:ac:72:c0:3a:c1:80:64:
44:81:94:0d:bd:73:69:1b:63:1a:46:13:c0:1b:cb:9e:00:5f:
b8:5f:be:99:18:f0:f4:15:a4:1a:c0:e4:35:36:d5:3a:d9:25:
0b:37:d2:fc:48:56:0e:bf:76:ce:8c:d6:b5:44:a1:25:e6:21:
b9:7b:9e:01:93:fb:8d:ba:40:bc:b8:d2:fe:f7:57:4c:b1:0f:
bc:ce:36:2a:7e:9d:15:b4:5f:13:c0:13:0e:0a:54:a4:95:4f:
16:47:5f:d9:cb:9a:af:94:4e:2d:22:b6:6b:f8:d1:15:fd:5a:
a1:cf:22:50:15:92:e1:55:c3:28:59:a1:9c:c5:d6:1a:e8:23:
8b:af:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:22:35 2025 by rpki-client