Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539b2feb-90f1-3f26-ab4e-1631ad078475.roa
File: 539b2feb-90f1-3f26-ab4e-1631ad078475.roa (raw, json)
Hash identifier: 6gto5J4Frk4Yq2Kf3GXxUqpAU9PX3+pHTR7gxLAbFJQ=
Subject key identifier: 5D:D6:4B:BE:05:ED:B4:7D:6E:21:0B:E4:73:DB:06:92:21:12:FE:06
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128F758953051466B2DF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539b2feb-90f1-3f26-ab4e-1631ad078475.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.228.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:8f:75:89:53:05:14:66:b2:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bed9c6e4-ea11-4e60-a627-e47e726dc999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:3d:68:46:1b:fa:4e:48:83:04:f0:50:17:
c6:03:13:43:95:22:2e:94:1d:3b:f9:59:10:fb:d6:
26:3b:fa:a4:3e:94:d7:55:06:28:d4:89:94:ff:1f:
3b:6f:08:b9:7b:55:0c:09:96:0c:e8:46:f0:0e:43:
9f:04:1c:1e:40:a8:2f:c9:50:72:2d:f8:92:33:cb:
b3:d6:c8:d6:15:e9:f4:8c:80:93:a9:cf:50:4e:10:
cc:f9:8c:5e:99:21:67:ff:83:08:43:72:3b:ff:11:
c7:c8:fa:9d:29:28:90:f3:d7:a4:65:9c:5c:e1:3f:
68:e8:71:4e:ea:65:e2:f2:11:82:5b:56:42:2b:93:
fa:67:8e:bc:5c:a3:81:a5:61:e7:79:a9:be:7d:97:
de:7f:c1:a9:47:e9:02:4f:30:14:66:6d:ff:b8:b7:
20:65:12:86:f9:54:50:4c:3c:54:47:2a:e6:65:2e:
4b:b3:9a:4d:0f:aa:0c:d4:7e:e5:2a:41:27:bb:46:
f1:30:dc:2d:a8:e9:b4:35:25:5b:6a:27:dc:c1:fa:
9f:39:0a:11:e5:ed:c3:92:c9:ce:66:95:ca:29:a0:
17:60:60:48:b1:b8:4a:81:16:4a:21:2a:b2:88:c9:
7b:cd:96:bf:d3:23:5d:75:1b:d8:b3:cb:58:97:1b:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:4B:BE:05:ED:B4:7D:6E:21:0B:E4:73:DB:06:92:21:12:FE:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539b2feb-90f1-3f26-ab4e-1631ad078475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.228.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:84:18:bc:48:d7:4c:dd:e7:de:98:61:f4:75:d5:3d:55:43:
f8:b0:21:81:3a:bc:84:83:65:f8:13:2a:52:f5:e3:40:4c:f4:
bf:6b:67:dd:ed:f5:ee:48:a2:63:ae:51:c2:ce:48:ae:71:30:
f2:9c:96:bf:d2:f0:ad:77:c9:d6:3b:1e:f6:b5:db:4e:4f:b8:
7f:6a:59:d3:4f:c2:ab:4a:33:b1:d5:ee:94:68:9e:61:3c:aa:
74:65:e9:74:54:18:bf:48:f3:0b:ca:23:e2:99:74:e6:88:dd:
26:d2:05:90:0b:94:0b:8b:98:24:7d:20:3d:4d:11:8c:84:16:
d3:d4:39:b4:7b:52:15:f0:d1:74:c1:b2:53:e9:fb:4f:14:ee:
de:98:e1:0a:c7:9d:cb:3a:6c:fa:21:d5:66:63:bd:d3:79:3e:
76:67:53:ee:ac:00:d5:91:82:22:52:bb:a2:54:ff:4b:b7:f7:
3d:cd:de:c3:a0:12:22:e4:44:67:5c:d8:da:14:d5:b6:3d:ab:
84:fd:dd:82:c5:02:7f:8b:a3:37:d1:fc:5c:90:86:4d:e5:60:
08:31:4c:90:50:3c:f6:c0:c9:29:3e:3a:a5:e9:bb:b6:63:bd:
9e:c0:e7:aa:d0:c7:37:bd:db:13:f0:5b:5d:2b:89:8d:b7:12:
cf:9f:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:52:33 2025 by rpki-client