Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/675dc39e-9e5d-35ef-b259-8159d2c7171b.roa
File: 675dc39e-9e5d-35ef-b259-8159d2c7171b.roa (raw, json)
Hash identifier: Mb7MKYxKkFUKl2B7jEHXTdaKaxQLoopIWd3zehMHgRA=
Subject key identifier: BD:92:7D:73:23:04:7D:79:3F:FF:03:7B:DF:E2:23:F8:75:66:C3:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C108B48177B63EFA88A5F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/675dc39e-9e5d-35ef-b259-8159d2c7171b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 174.57.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:8b:48:17:7b:63:ef:a8:8a:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e3dad017-acc6-4474-bf79-5c61f772caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:03:4d:63:56:4e:4a:28:3e:82:d8:40:cc:
0b:79:15:34:51:4c:e4:2c:5b:6c:0f:12:26:39:2e:
d0:8f:6e:d0:d3:ab:e9:3a:fc:f7:23:df:c3:f5:49:
55:a1:3a:66:00:ab:0c:d1:f6:fe:b7:85:18:b9:c0:
14:14:2e:2b:00:ed:2e:e0:02:73:72:e1:bd:9b:00:
cd:37:f0:68:2e:d0:2c:39:de:69:c6:8e:ef:ed:4e:
b8:2f:5a:c2:73:a7:74:57:8c:68:7a:fb:3b:32:de:
1b:9d:9b:4f:d2:db:9c:d3:67:eb:92:84:dd:e4:de:
ba:ae:dc:36:25:78:d9:b6:ce:b1:da:05:3a:87:b3:
30:49:56:ee:07:33:c4:07:a7:f3:7e:42:f0:35:ad:
e0:9c:c0:01:26:98:d8:76:4c:48:7b:8d:1a:20:80:
66:67:2d:b8:86:f0:78:ee:35:ff:ca:eb:c3:99:fb:
b4:b2:ed:3f:1f:d4:a2:4f:3a:3c:56:55:4a:d7:21:
db:e5:bd:57:d7:0e:c8:23:f7:44:69:81:41:08:6f:
ed:ca:4a:95:b3:a5:a9:54:b6:65:2c:c4:2e:64:3f:
af:4d:de:82:81:26:b2:49:41:07:06:58:31:5c:f0:
04:f1:e0:2c:89:7b:6b:70:04:bc:72:83:25:4c:eb:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:7D:73:23:04:7D:79:3F:FF:03:7B:DF:E2:23:F8:75:66:C3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/675dc39e-9e5d-35ef-b259-8159d2c7171b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.57.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:38:31:e5:fe:55:7a:ae:a6:3d:d4:94:f0:01:0c:a3:cc:b9:
49:53:21:b1:55:e4:8c:42:e4:06:fb:3d:c0:a7:cd:1c:38:2d:
d7:b5:53:1f:a9:4f:6e:4e:0d:24:72:1d:22:af:55:bb:67:5a:
e7:69:83:7a:23:a1:11:f3:2a:4f:f2:0d:df:ff:8a:2a:7d:cc:
ab:a2:93:b1:05:b5:09:46:38:31:28:98:6e:e0:5a:9d:1c:d6:
0f:18:5a:7f:90:ac:4b:34:2d:f3:1b:a7:a9:f3:a0:1e:e2:41:
6c:4a:e5:fe:8c:3a:a5:84:ad:f9:db:76:18:5d:05:f6:7b:6a:
7f:b0:3e:d1:0a:bd:29:86:8a:45:91:5f:c2:66:ba:ad:b5:31:
d3:5d:7b:68:1d:a8:14:82:41:2a:b6:f4:22:2f:75:f8:a3:dd:
5a:f7:bc:c0:73:f1:aa:fb:8a:cb:74:4c:a6:44:c3:3a:69:9a:
14:6b:b9:51:04:c2:41:7d:c1:cb:0b:d1:88:58:cd:7b:9b:59:
b6:fd:6a:cd:2e:87:3a:a9:2a:5a:66:39:6f:66:4e:4a:a5:5b:
8d:ac:e5:b8:cf:3a:f0:62:48:25:a4:1f:49:f8:f8:dd:84:84:
79:1e:b8:80:11:b9:43:70:ea:d6:0d:9a:cd:18:4c:67:cc:51:
83:4c:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:39:53 2025 by rpki-client