Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57577b47-be1c-3300-8ac0-28186e1d59e1.roa
File: 57577b47-be1c-3300-8ac0-28186e1d59e1.roa (raw, json)
Hash identifier: whUIfi+BgFHFLeBDULH0VYwbGYNFbuCKv73UcT9hQWA=
Subject key identifier: FF:B2:3D:3D:43:9A:FC:40:B7:50:2A:0D:C4:17:1A:A4:FC:95:86:D3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9634040A8680F47AB700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57577b47-be1c-3300-8ac0-28186e1d59e1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.171.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:96:34:04:0a:86:80:f4:7a:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2f0ae68e-1c01-4f7c-bf68-67e6077e87ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:e1:d4:85:98:43:02:78:11:fd:16:de:e1:
f0:cc:18:52:ac:ee:19:64:93:c0:d1:6c:f1:a6:ec:
d9:45:02:7f:05:05:c4:fe:ee:64:8a:2c:ab:03:42:
0d:2f:6b:11:d5:3e:07:fd:a2:03:19:ff:c1:0a:49:
6d:f7:bd:ff:f0:f5:b2:f7:f1:0f:cb:ce:2e:4e:e6:
2f:56:8e:af:c2:00:b0:4d:87:8e:c9:2c:25:e6:c4:
f8:22:9d:bc:f7:d2:d1:af:c9:4f:c2:91:a9:85:d3:
c5:25:97:a9:ee:82:dd:26:4d:4b:25:e8:1a:55:de:
80:a8:09:9e:b4:58:25:5e:f7:8b:5f:2c:39:b5:ba:
71:ed:0b:3d:bf:d1:fc:39:2c:ee:7c:a1:a7:9f:73:
7c:5c:8e:19:a0:54:14:b3:9c:08:b4:c1:2c:30:22:
5e:c6:80:28:d5:1a:c7:60:00:f1:90:70:20:65:7f:
d0:07:c9:98:07:ae:9e:23:74:c9:93:4f:14:47:94:
41:52:8f:e0:1e:78:42:b6:cd:8a:a5:b0:d7:d8:44:
1e:e1:64:d2:1b:32:51:0a:35:eb:eb:df:d5:af:9d:
db:1e:51:29:f8:20:b3:70:0f:97:e8:e2:0b:d3:7b:
66:37:ec:1a:17:bd:2d:32:c7:72:03:db:2f:3a:e5:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:3D:3D:43:9A:FC:40:B7:50:2A:0D:C4:17:1A:A4:FC:95:86:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57577b47-be1c-3300-8ac0-28186e1d59e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.171.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:67:67:8e:6c:0e:e8:4a:10:7b:bf:90:b1:c0:19:81:26:d4:
1d:e8:ca:29:a5:44:dd:72:23:05:50:07:c9:9e:7c:e1:a7:67:
b1:0d:b0:50:85:4e:1c:0d:45:1e:ea:e7:a7:e3:4d:80:da:2a:
57:79:0c:42:03:c9:55:42:85:a3:dd:a5:2f:44:40:86:fc:28:
e0:21:9e:82:4d:be:44:e4:ab:48:07:25:cb:84:b2:cd:cc:e1:
48:3d:d8:6f:35:4d:6c:ca:f5:6a:49:15:49:b0:49:5e:98:59:
fd:a1:63:3e:5d:4f:b9:8e:4e:e9:ad:b6:98:70:79:3f:39:07:
d2:a9:4a:c4:53:1a:68:cc:e2:24:90:7c:d1:a3:96:a9:be:97:
fb:96:06:7f:50:da:28:55:91:00:d0:9f:1e:95:22:f8:74:02:
2b:7c:e0:96:f8:a3:d1:f5:8b:78:9d:29:99:cb:7a:09:eb:20:
73:b7:ff:aa:32:ba:5f:b7:56:d1:89:ca:42:09:a7:0e:b2:d3:
c0:14:3c:00:52:47:71:68:00:8a:dc:6e:e8:46:b7:e7:7e:9d:
a2:79:86:4e:2a:df:1a:a7:00:a2:ec:ac:b6:a2:e6:40:db:97:
42:5d:fe:d6:09:f4:3c:d7:ad:e0:03:01:24:d0:9c:a5:97:c6:
18:f1:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:56:21 2025 by rpki-client