Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701028-801e-37c3-8fd3-696ff19387c5.roa
File: 4f701028-801e-37c3-8fd3-696ff19387c5.roa (raw, json)
Hash identifier: bGi4wD/I33tspTK2gjKx9Pppwpq7gj0VlJ74zOeaLBQ=
Subject key identifier: B8:13:66:D1:23:C7:5A:B4:E4:12:70:A5:39:38:1E:8C:E3:1C:F7:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DD013C446EF784B0B0A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701028-801e-37c3-8fd3-696ff19387c5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.233.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:d0:13:c4:46:ef:78:4b:0b:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a329f86c-dee1-465b-bad4-ef01a953ef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:06:c8:27:0d:47:5a:86:86:83:44:85:7c:
19:cd:f0:a1:e0:46:b0:7f:45:9f:58:18:ed:7b:f9:
64:de:09:7c:f1:42:4e:38:9f:e2:60:36:e3:90:b4:
d3:f4:cb:d6:f6:b2:d2:4e:ca:db:e7:42:2c:d1:25:
12:52:e1:a8:99:77:ff:31:10:7c:cc:34:75:3f:57:
93:67:4b:a0:98:8f:82:3f:cf:63:a6:d3:49:b2:32:
cb:6f:f2:c4:42:3b:3d:30:52:b1:15:ef:ec:e9:45:
33:de:f0:ec:7a:a0:67:1a:5a:40:09:63:f7:f0:d4:
12:ee:a0:ac:23:58:77:4b:65:99:4c:f5:5e:75:66:
3a:87:64:f1:2e:9e:cc:af:01:34:ff:65:0b:61:f6:
8d:a6:01:86:09:cc:13:44:df:8f:b1:bf:12:c1:a5:
b7:10:87:7f:10:ba:d7:cf:a8:32:31:19:7c:95:43:
41:5f:2c:17:97:1a:4f:6f:73:2d:24:db:3c:05:c6:
f5:1d:b8:dc:33:6e:e7:17:8f:1f:51:ca:17:67:cb:
6f:f7:1c:db:86:32:4f:6a:63:d5:81:bf:0b:81:27:
5a:80:62:f0:08:97:12:41:4d:0d:e6:e7:80:dc:de:
68:c3:d3:41:a4:2f:8a:ad:07:ca:35:44:0b:66:99:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:66:D1:23:C7:5A:B4:E4:12:70:A5:39:38:1E:8C:E3:1C:F7:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f701028-801e-37c3-8fd3-696ff19387c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.233.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:86:9e:4d:88:6b:91:40:f0:22:69:e8:e1:6b:83:11:a5:b9:
d5:97:8a:98:41:a4:be:18:5c:ca:44:0b:96:90:46:15:89:6d:
a3:1e:53:b2:03:50:b7:41:e4:07:98:af:b9:32:ae:50:27:83:
d0:33:8e:b3:6a:f3:f2:07:b4:90:c6:aa:12:72:36:9c:83:41:
a5:ba:68:6f:70:e7:ce:5d:91:07:02:17:00:05:f3:85:d6:29:
92:65:14:f2:23:5a:16:95:48:87:6a:96:77:68:02:8a:d9:34:
42:c8:c8:0f:7d:f4:8e:e0:ce:9e:0a:03:99:92:0f:e2:ae:2e:
71:65:d4:b6:e2:66:58:0d:c7:48:af:d8:cc:fd:1a:22:45:18:
28:6a:91:c7:11:a1:79:cc:93:90:1b:f7:22:e0:d1:f7:7c:2b:
11:da:fd:08:60:87:72:88:d1:26:e5:c3:97:1e:1b:67:df:1e:
16:a3:cf:35:b8:b3:10:22:e3:19:eb:1d:7f:77:9e:78:65:7f:
5d:c3:18:3b:2c:ef:a4:4f:55:07:ef:4e:30:7c:7b:d4:f8:76:
59:11:36:8a:95:0c:bb:af:b0:c5:21:6f:c1:62:a3:2c:34:b4:
b8:93:08:84:62:32:92:6d:6c:92:e0:10:b3:f0:0c:2d:d1:1f:
96:59:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:15 2025 by rpki-client