Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa
File: 9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa (raw, json)
Hash identifier: bSXDEz0eXP04cLimuZDaJGYJz3dhJ3qVMhjA4HwIvd8=
Subject key identifier: 67:52:3C:3D:46:B9:BC:A5:27:25:9A:41:9F:B0:CA:14:ED:A7:B6:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9CCF5ACE1D5E23F9D000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.238.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9c:cf:5a:ce:1d:5e:23:f9:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3c2c8bc8-de92-4837-8a11-1f2ad1da5a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:9e:c0:21:9c:a5:87:81:15:18:71:0c:30:
8b:b0:b3:a0:34:21:3a:94:58:28:8b:67:5b:a0:9b:
7e:f7:f8:a1:25:91:67:a3:80:0f:a4:33:b5:11:f3:
52:f6:3c:a5:16:b7:18:8e:3d:13:bc:32:7a:99:6c:
88:9b:d4:59:2c:37:15:71:f3:de:b3:e7:b7:bb:f3:
3b:f9:ed:bd:c0:05:dc:49:68:56:10:d3:cf:8a:0a:
62:2f:e6:c6:9c:e3:02:27:d5:0b:95:36:11:68:f4:
09:5c:35:d2:aa:81:95:76:0a:63:8d:f6:a5:3a:5e:
a9:d2:fb:a5:f2:7a:45:d2:9e:8e:02:d4:cc:40:4d:
bc:43:50:be:18:aa:c5:bc:85:5e:88:52:09:41:ef:
9e:5a:6c:2a:c1:3b:eb:ab:59:86:38:ab:ed:5c:b7:
3c:96:36:fa:0d:d8:c7:0a:db:17:5f:71:e5:5b:bd:
11:8e:f0:34:37:21:36:82:80:a9:fc:47:d0:db:a2:
2c:31:25:ed:a3:ef:10:d3:0d:1e:53:d4:7b:6d:7c:
96:43:e1:76:30:57:5d:01:d5:9d:de:6c:de:83:ce:
ed:c1:88:04:01:8e:68:31:fa:f5:df:7f:da:21:28:
80:e9:be:11:b6:f4:14:2d:67:d2:72:90:34:e1:6d:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:52:3C:3D:46:B9:BC:A5:27:25:9A:41:9F:B0:CA:14:ED:A7:B6:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.238.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b4:63:85:45:82:5c:ef:be:dc:d8:62:98:c3:97:a8:9d:08:
fc:46:1b:dc:8f:9b:18:da:ed:36:06:33:80:e7:14:8b:fd:71:
00:fa:07:07:47:4e:f1:35:05:5a:23:ae:7c:bc:be:15:80:03:
09:62:b7:e6:fa:88:b5:c3:a2:b5:7d:61:13:ff:05:a4:f9:b1:
cd:c4:bd:6d:d1:81:83:93:c4:30:1c:f9:e3:64:2c:de:7c:c0:
24:33:0f:09:e1:c1:7f:78:08:0f:b9:08:e2:45:e0:dd:e3:12:
33:47:85:86:f6:eb:11:ff:bd:88:7d:26:3e:5c:99:37:c0:db:
f9:5d:17:bf:35:9e:46:6a:20:a8:03:2b:f2:ca:76:58:ef:b9:
b8:3a:83:48:37:aa:2c:fe:32:8f:b9:4a:e3:39:93:67:6c:e4:
19:08:cd:89:e5:63:d6:3f:fa:fc:ce:43:31:06:e7:fb:5f:7b:
31:15:cf:a4:02:93:e3:b5:47:cc:a6:cf:e0:f7:22:ba:da:32:
3e:04:74:30:b4:c0:f4:38:b4:42:ca:21:e6:13:47:83:2a:e5:
79:9a:9a:54:1f:87:3d:df:4c:24:ba:23:79:68:82:48:18:6b:
04:16:2b:38:8f:07:d9:46:30:bd:11:11:25:b4:9d:82:58:d3:
b3:3b:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:23 2025 by rpki-client