Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa
File: 4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa (raw, json)
Hash identifier: 1zWbcdGyI8pa1tI3vcxhCda6BgHXruK3mrKXsHXenEw=
Subject key identifier: E8:68:AE:7E:94:65:CE:DD:71:70:48:9F:90:6A:7B:BC:2A:84:46:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CFD189547B6950554C3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.170.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:fd:18:95:47:b6:95:05:54:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f05db33a-a488-4408-a7b9-1cd20e018de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:a3:69:a4:61:4b:a7:21:75:0c:8b:df:1d:
06:5f:00:39:86:5a:02:84:3b:12:38:2b:56:a5:1a:
6e:b2:77:9d:7a:70:ee:c1:32:1c:3c:b0:23:68:41:
51:6d:c3:d0:f8:30:3b:f7:5e:a0:43:b8:a0:99:c7:
d2:c3:8e:79:5c:02:06:76:20:c4:80:fb:10:fe:07:
a4:53:6b:84:6f:4e:32:8d:6e:a8:21:5f:6a:30:d8:
88:4d:ed:fd:e1:5e:57:1e:e6:ce:57:98:e6:8e:70:
6c:ff:43:ef:94:39:f1:b0:53:be:a9:37:34:30:4a:
7a:36:60:a0:27:ce:1e:61:f8:66:8b:72:36:fe:93:
f3:68:24:57:4f:dd:b7:ce:47:01:6c:1c:ae:e9:3d:
5a:05:12:df:a5:65:70:0d:bd:47:79:71:35:c1:b2:
1d:b5:54:ec:e2:a7:5a:ac:59:71:0c:33:d3:dc:44:
3d:80:55:b8:ca:54:11:3e:68:e0:c0:e7:13:e8:b9:
13:7b:08:f0:c7:42:3b:f3:48:42:d8:1a:5c:86:e6:
12:56:23:70:01:60:7e:0c:63:75:af:ca:63:35:22:
a4:b2:3c:c8:c0:c9:53:00:ad:34:b2:3f:12:63:67:
69:33:d3:95:e8:e8:97:cf:a2:72:93:37:71:d2:cb:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:AE:7E:94:65:CE:DD:71:70:48:9F:90:6A:7B:BC:2A:84:46:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3f1e0c-082e-3144-a35e-3aa4e84704b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.170.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:d6:47:d2:32:25:4a:50:68:9e:d0:54:84:26:b1:de:b7:ac:
85:c0:63:66:ff:47:49:d4:16:90:c3:bf:61:74:e4:da:c4:a5:
16:6d:7f:29:7f:b9:cc:e3:b6:d9:b4:cb:46:94:ed:86:18:b5:
85:3a:52:c6:2f:15:ad:c3:b1:7a:4e:89:f0:ed:9b:8d:48:36:
e1:1b:a6:ee:f8:70:a6:d8:dd:ae:18:b6:46:46:ad:22:ae:30:
01:f8:1e:89:73:5a:c0:19:35:ba:27:4b:ba:af:b0:fe:b5:0a:
3c:cd:bc:13:a5:12:39:80:bb:5f:71:08:36:c8:36:00:3b:aa:
7f:df:7c:a9:96:ac:97:94:8c:10:e2:5f:4f:37:10:a3:e7:f8:
92:c6:07:4f:47:28:94:a4:0a:cc:e2:9d:3a:e8:10:be:86:e8:
af:a1:df:4d:cc:79:96:8e:ab:7a:9a:7d:b9:42:78:e1:d8:02:
68:b0:28:3d:24:ad:d1:d1:b7:dd:52:c7:07:eb:66:34:b9:b1:
91:41:06:ee:64:1e:07:fd:6a:c6:db:03:4f:4b:fe:00:e1:d0:
ab:30:fb:e6:3c:e2:d2:6e:93:c2:83:9f:30:d1:07:88:7f:7a:
45:a5:ea:46:b0:f9:3d:e9:51:28:24:73:d5:74:29:2d:ff:0c:
2b:bf:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:30 2025 by rpki-client