Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d05a38-521f-3820-96f8-95b6051e723a.roa
File: d1d05a38-521f-3820-96f8-95b6051e723a.roa (raw, json)
Hash identifier: 13w+YWNtQL/PGqalIPX9eg8ikaJvXrecfc4gE5LlHLM=
Subject key identifier: 50:7D:DA:06:A2:FA:D4:6A:BD:15:32:D9:FB:C6:0B:8D:E5:D8:E8:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D5E72F748FF56BBEE100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d05a38-521f-3820-96f8-95b6051e723a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.175.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d5:e7:2f:74:8f:f5:6b:be:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4a928a48-1ae6-4dbc-b698-bf83e78bc67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:6d:e9:c8:85:36:6d:5e:26:18:57:44:66:
d8:e4:72:2c:f5:25:86:c7:bf:26:8e:0a:09:84:da:
7b:e7:df:1f:13:69:25:b3:59:67:d9:99:8d:cc:79:
80:ac:ec:a7:ea:4a:f4:4a:d2:03:b5:a9:71:ea:b7:
70:74:10:d6:ee:3c:b5:ab:9e:b8:b4:6d:32:38:94:
37:e8:ad:9b:e6:2f:9b:26:b1:4f:9b:0c:9a:ca:17:
3b:1f:35:e3:ce:04:e1:eb:c1:2d:66:ad:e8:d6:ac:
86:1c:93:2f:5f:9c:78:43:30:0f:d2:3a:12:6a:41:
aa:ca:2f:25:d0:ea:ac:77:13:87:3b:5c:15:5e:05:
b7:ab:71:72:fd:f3:ab:6a:a2:86:47:d2:24:79:a4:
45:f1:29:ad:94:4d:0e:a4:50:66:7e:18:72:a8:42:
9e:58:0c:c7:ce:c6:d9:83:56:67:72:1b:df:b8:fc:
54:e8:21:94:22:2d:82:71:cf:73:a8:c7:63:17:46:
47:69:02:6c:2b:fc:dd:69:eb:b1:89:bd:b9:f2:c3:
23:f7:44:6b:d8:df:6c:1c:b8:ab:db:fd:7d:0e:b7:
1e:5f:66:c8:b5:19:56:9f:4f:77:e4:12:ce:50:b9:
04:e8:d5:f4:f1:59:06:a9:ba:5f:a2:27:5f:96:de:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:DA:06:A2:FA:D4:6A:BD:15:32:D9:FB:C6:0B:8D:E5:D8:E8:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d05a38-521f-3820-96f8-95b6051e723a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.175.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:0e:ba:f6:06:5c:21:51:fb:90:d7:af:8b:ae:8b:24:e1:32:
58:7d:5c:84:97:89:44:60:66:94:16:03:fa:b7:2e:39:4f:0c:
18:d5:af:15:5a:0f:1f:86:16:ba:b8:bc:44:78:57:f9:08:e0:
63:4f:d6:fa:7c:a2:dc:4a:3a:65:05:f8:70:4c:fe:37:24:8a:
b5:d3:d9:de:56:2f:e8:57:d0:0f:bd:62:80:b0:26:42:3c:b8:
b5:5e:1f:02:fd:0e:22:2a:93:92:be:28:02:f5:23:68:17:b7:
87:67:f5:35:65:f4:66:aa:9b:f9:b4:bd:1d:45:a6:f6:aa:88:
80:58:e2:58:1a:94:51:7a:67:d2:99:5d:9d:70:27:14:3e:a9:
b0:c8:b5:70:8c:33:cc:4a:4b:df:da:a2:8d:6c:ee:f4:2e:f2:
75:ed:54:b8:6d:b4:90:50:87:91:20:27:9e:f3:5e:84:53:57:
77:41:f6:85:b4:ad:4f:70:b6:24:c5:d1:aa:50:eb:7f:cc:c3:
fd:5e:17:bf:b6:3d:36:82:3a:e4:5d:18:12:08:8f:44:ef:e7:
8d:31:25:d4:62:0e:9c:5f:7a:07:0e:8f:99:8f:8e:73:04:cc:
7f:27:ba:21:f3:50:22:7a:de:aa:b3:3d:ac:96:38:fa:f4:b1:
2b:73:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:28 2025 by rpki-client