Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b629e07e-f27a-355e-ba52-9f38f2aa614e.roa
File: b629e07e-f27a-355e-ba52-9f38f2aa614e.roa (raw, json)
Hash identifier: Ig7PWeeC+03owSrZMzUvrmmh42w0G1IdJZi5BNYCbXI=
Subject key identifier: 3B:40:C2:EC:89:D1:4A:C5:A6:DD:B1:06:A1:18:CB:66:1D:B4:EB:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AE0F7F28EFAE014AA8EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b629e07e-f27a-355e-ba52-9f38f2aa614e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.232.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:e0:f7:f2:8e:fa:e0:14:aa:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=287da81f-f618-4c93-a5af-22d57e8a5c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:ec:42:1a:10:ec:70:87:5b:bb:6d:f9:b8:
57:7d:6f:c1:31:14:f5:2c:07:18:fc:db:84:16:3a:
1e:d2:76:63:18:14:2d:6f:58:78:94:47:09:28:ee:
41:8a:60:59:4f:a8:21:41:0f:04:a8:b3:dc:18:d6:
93:90:6b:3b:40:5b:a4:fa:92:58:4c:8e:41:b7:af:
83:10:7f:39:e3:24:6d:73:0f:a3:93:4e:18:4a:33:
1e:6e:51:ec:f2:fe:f8:a7:c9:e7:de:a9:77:3f:4a:
a4:24:18:99:6a:c7:e6:62:95:14:42:2b:f0:f0:1a:
24:dd:cd:58:43:64:88:93:5d:2c:db:e2:e7:59:d0:
1f:27:79:a4:84:05:f0:2b:5a:78:16:13:08:da:3d:
4f:d6:01:ff:1a:e5:9a:b7:9e:4e:5b:7c:53:79:b7:
14:3e:87:02:88:25:4a:65:6a:82:63:80:0e:6a:1f:
5e:39:1f:55:5c:df:f3:15:5b:30:c4:ec:9e:e4:db:
a7:2e:08:60:62:56:91:da:5f:6b:56:31:ef:21:60:
41:71:bc:98:1b:8c:b8:58:04:9d:84:92:6a:ec:d2:
a0:f9:18:45:4f:f5:55:e6:7f:de:15:d7:35:d5:3c:
95:d5:9e:72:8c:73:fc:fc:7f:ab:b4:2c:cd:c3:bd:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:C2:EC:89:D1:4A:C5:A6:DD:B1:06:A1:18:CB:66:1D:B4:EB:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b629e07e-f27a-355e-ba52-9f38f2aa614e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:1c:09:9a:40:af:f6:1b:40:4f:64:7d:80:61:2b:3b:26:87:
5a:aa:5b:4a:29:12:db:9c:46:ff:bf:ce:4a:a1:21:75:42:55:
f1:10:ba:83:4f:00:bb:1d:aa:95:48:b3:5b:86:83:9f:e5:47:
8b:fd:d3:71:1c:b3:26:75:20:25:b9:4a:a7:81:27:84:46:25:
19:eb:1b:5b:6e:66:db:79:ed:54:86:3b:81:03:cd:9d:27:6b:
dd:87:a5:0f:86:d7:50:46:e5:01:a0:75:9a:45:40:2f:d8:c1:
78:4f:e7:0c:9e:b7:d3:e6:cc:09:4e:87:67:46:31:fa:19:c3:
95:db:db:d1:27:8e:48:fa:8d:99:dd:c4:4d:c9:5d:86:3b:c8:
40:b6:9f:7e:af:cd:3a:f5:6b:76:e7:82:14:35:e0:6a:66:12:
fc:8d:a5:45:c8:e6:9e:fb:2c:44:f8:9b:26:61:53:c3:da:20:
74:0c:40:78:fb:2a:45:30:61:ec:b5:f0:8e:98:66:7c:00:64:
95:90:74:af:57:fc:a9:dd:73:bd:67:26:62:fe:07:8b:cf:72:
80:99:ae:68:01:f8:bc:bd:55:35:a4:4c:fb:44:1b:39:28:32:
d7:d5:e2:df:44:3d:ad:8d:17:dd:1d:74:77:2e:a2:db:cd:7e:
01:2e:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:10 2025 by rpki-client