Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe40f82-5662-3ce7-805b-025eac710a51.roa
File: afe40f82-5662-3ce7-805b-025eac710a51.roa (raw, json)
Hash identifier: TO6e/0N1s9uuRmsGh0xwJLUKNYoELOCSB+FlJ/89Z6U=
Subject key identifier: 95:F6:A5:49:F6:75:29:A9:A5:32:2A:67:0E:E6:66:7B:8E:99:4B:59
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C109EF7F8FACA95ECFC4780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe40f82-5662-3ce7-805b-025eac710a51.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.225.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:9e:f7:f8:fa:ca:95:ec:fc:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=049196ce-adf6-4d1d-86bb-aead3906dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:f4:95:d4:ea:f8:da:cf:15:bb:56:d7:22:
58:c6:07:c9:1b:a7:52:04:21:46:fb:11:5f:95:8d:
01:f8:3c:74:98:f0:5d:28:42:d2:ee:38:6b:ad:69:
a0:be:d2:c7:6e:02:e2:84:a0:79:e0:9a:70:6f:40:
bb:0c:9e:43:e4:e3:ef:29:b0:f5:d5:4e:e2:b1:32:
4d:45:7e:1a:1c:ca:f1:41:83:bf:54:fc:7c:63:a4:
69:99:c5:75:67:4c:9b:ea:61:d9:9a:c2:fb:9c:c3:
22:e1:99:a7:77:0c:df:60:1f:58:47:fd:de:c4:fa:
db:f4:26:2b:83:e2:89:fe:10:2b:b8:46:c9:92:15:
3c:7a:65:65:96:dc:8c:34:0e:6d:1b:15:28:c4:95:
14:89:cb:17:a4:61:e4:9d:4d:69:6c:59:82:0e:f7:
74:15:41:75:02:35:e8:a2:4e:cd:aa:12:df:27:f7:
f9:3a:66:72:68:9f:25:d5:28:06:ac:07:d7:c5:d3:
7d:dc:c2:71:bb:fb:f1:0a:87:27:fb:e1:9a:5b:6a:
b3:41:62:e8:4d:ae:68:b5:c7:00:63:49:08:a9:a2:
7d:52:d0:4c:c3:00:3d:53:80:f7:2f:78:b9:aa:04:
37:53:ac:28:bc:18:da:e3:ab:bb:9a:03:5b:88:9b:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:A5:49:F6:75:29:A9:A5:32:2A:67:0E:E6:66:7B:8E:99:4B:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe40f82-5662-3ce7-805b-025eac710a51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:04:02:f6:f9:e3:09:00:1a:94:e2:aa:21:5b:94:0a:8a:73:
b1:88:bf:08:02:92:63:58:99:57:b6:ab:5f:55:b4:61:0c:40:
5e:00:f9:8f:6d:08:39:4a:3e:b9:e0:2b:de:40:02:ed:de:f7:
c1:c2:14:cc:7e:d0:b0:bc:ab:5f:c7:01:22:4d:9c:92:bd:19:
15:f0:a9:e6:c7:81:41:11:2d:06:f7:57:d9:2c:e4:92:59:9f:
16:7f:1b:d9:88:1f:ed:37:82:b0:02:a8:1b:3b:95:d6:68:bc:
b4:66:e5:08:55:83:69:ee:01:18:dd:04:27:20:c6:5b:82:1a:
d0:a9:4f:f2:3c:54:ca:20:b4:e6:9e:c4:3d:e2:c7:d6:93:87:
54:f7:10:b4:c2:43:87:a9:9d:05:a7:16:58:77:fb:20:f2:ee:
a0:9a:71:9d:7a:1e:27:17:02:be:9d:f5:3a:4a:b5:c3:d4:6e:
42:10:76:1d:8b:a9:00:7d:6b:2b:ed:d6:64:d2:57:44:c0:13:
c5:31:de:3a:c0:09:22:b6:ea:4e:dd:4a:ca:dd:9f:49:2b:8a:
5d:23:9b:a3:bc:15:62:9c:24:97:6f:6b:94:44:5b:38:05:bb:
9b:cc:e1:fe:5a:cd:ea:1d:c1:c6:16:f0:e5:7e:46:0b:b8:39:
f9:8a:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:51 2025 by rpki-client