Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa
File: 9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa (raw, json)
Hash identifier: /E28fxTtbEyjilnN3nYtCeAflPhJAOOLeIcv2LQJzeY=
Subject key identifier: 14:8C:7F:D5:63:96:AB:B3:7E:84:79:0A:FB:99:C3:17:09:3A:C8:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D8E7DEB6E49C89D66380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.186.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d8:e7:de:b6:e4:9c:89:d6:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=eb3c7e54-0507-4940-9de7-a9b490d5c7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:83:16:86:62:9d:70:a7:a3:6e:a8:15:a8:
c7:d3:95:49:23:61:65:15:c8:ba:6d:53:33:92:8c:
7f:ce:fa:af:4a:7d:1f:3b:be:14:1f:60:66:0e:0f:
a5:c3:1d:0f:03:09:22:86:02:fd:93:3c:62:a8:1c:
e6:27:51:ac:20:03:15:ec:ac:fe:69:1b:d2:0f:dd:
1e:45:79:60:b2:9e:7d:17:79:7d:77:5a:64:60:f7:
e0:d4:bd:ac:ed:b1:bc:27:72:d6:07:c9:1a:6f:f6:
2f:bc:9f:89:dc:cb:7e:a7:36:15:27:c2:24:24:0f:
10:4b:35:1e:0d:5f:3f:27:f8:29:08:d4:dc:40:d7:
2f:8e:b1:e9:3a:ad:7a:14:de:05:b0:bd:cc:bd:49:
71:66:bb:1c:a0:f5:eb:77:3d:92:b2:98:dc:4a:a2:
1c:dd:e0:63:aa:12:3f:c2:27:b4:f6:8e:44:f2:92:
f0:83:1d:48:17:c0:19:76:0c:e3:7d:0d:ba:67:d0:
1c:92:e9:cb:0f:a2:c6:9b:63:50:00:5c:e2:dd:ce:
b3:25:19:8f:e9:63:73:b2:64:3d:ae:e8:02:8e:e6:
92:23:ad:13:33:a5:49:26:35:80:96:bf:ee:78:66:
d3:ea:90:11:44:c6:6a:3a:01:e8:a3:86:d6:ab:5c:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:7F:D5:63:96:AB:B3:7E:84:79:0A:FB:99:C3:17:09:3A:C8:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ba5597b-7f4f-3705-9826-fb6b90ae1807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.186.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:12:e6:e1:ed:68:47:8a:fd:38:1c:8b:8b:50:5b:9c:9f:d9:
ad:73:b2:54:2e:e2:63:ad:c2:91:44:c5:e3:d3:d2:f0:d4:97:
6d:59:c1:d0:10:00:24:82:46:e9:5b:67:0d:4d:df:c2:0a:ae:
6a:23:ad:0e:bc:09:92:85:f7:a9:eb:e7:06:22:4e:00:9c:73:
8b:3b:64:1f:de:98:46:a6:fc:fe:43:0d:79:a4:4e:78:50:d4:
2a:ee:31:2e:2f:8a:f2:24:6f:dc:a1:5b:42:c8:b5:4d:fe:97:
c6:99:b0:a9:69:0e:36:49:0f:a1:37:cf:c8:8c:a1:73:35:ab:
18:3f:24:a5:ed:fc:fa:65:7c:07:5e:70:b5:cc:ac:59:de:3c:
95:8f:cb:7c:3a:22:be:e2:b4:db:4e:90:17:3f:d6:2b:80:5f:
a7:3c:55:2e:cb:e4:a4:75:d6:23:bd:3f:f6:e1:5a:b4:db:d2:
f7:2e:83:db:b1:84:d1:cc:55:79:ab:31:79:e6:2e:ca:36:83:
be:82:45:f4:b4:c4:67:9d:d5:37:01:ba:b9:e7:48:bc:47:9a:
2e:17:c5:60:a1:78:4c:19:2d:0a:56:e4:0a:91:7f:eb:1e:a1:
c6:2f:92:9c:f7:9a:a4:c2:01:fd:b6:8f:a9:01:b1:6a:e0:06:
2a:91:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:07:59 2025 by rpki-client