Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d42feb0a-8788-35ad-af47-03953ac53382.roa
File: d42feb0a-8788-35ad-af47-03953ac53382.roa (raw, json)
Hash identifier: zJrKnZ6kghUZXg27B5Ju+cL6DcxnPAkPtv7+cSUG2Z4=
Subject key identifier: 22:CB:9A:4E:E5:B2:0F:A6:FA:3A:39:62:9A:51:7D:89:3E:49:73:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D178C42F99362F3BC8C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d42feb0a-8788-35ad-af47-03953ac53382.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33655
IP address blocks: 96.124.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:17:8c:42:f9:93:62:f3:bc:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6c599c2d-8834-44f6-8124-7640e7485243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:45:a1:07:40:44:f4:09:0c:0d:d5:2c:1b:
a7:53:4a:1a:d2:a1:3f:b1:c4:23:64:31:94:2d:de:
9b:ba:d2:3c:bb:10:a9:ab:27:08:fe:6e:e7:28:ae:
ba:24:92:30:1e:80:49:b0:1e:a9:c5:f1:b1:e4:96:
ec:36:b6:04:2d:ea:86:df:f1:10:c1:43:ba:77:7b:
bd:3e:48:f4:66:09:7d:e0:c0:d6:d6:2e:53:d0:30:
08:df:b1:7d:30:2f:84:41:c4:a0:8c:8c:a0:dd:85:
e1:5e:ee:f3:9f:9a:2e:c4:04:ea:93:cd:48:bf:72:
5e:c5:01:76:9c:bb:d2:9d:0f:da:1f:e7:23:79:0c:
e6:25:ae:45:11:cc:9d:39:1a:fc:2d:ab:d4:e8:cf:
d3:f9:53:3e:dc:52:2d:7a:c6:87:30:68:97:18:16:
bb:2d:f8:27:8c:42:e1:f8:a6:94:6c:ca:98:23:2d:
24:13:66:64:56:93:38:c7:44:6f:64:da:cc:b8:65:
03:0b:c7:59:53:d1:20:72:ae:9d:8c:58:18:48:8a:
c1:2c:c7:fb:d7:60:93:ab:6c:ba:55:da:61:d1:34:
32:36:57:f1:7a:58:06:e5:1a:31:46:86:f4:41:fc:
6e:32:1a:bb:6c:04:a7:07:52:0b:aa:ad:a2:bb:91:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:9A:4E:E5:B2:0F:A6:FA:3A:39:62:9A:51:7D:89:3E:49:73:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d42feb0a-8788-35ad-af47-03953ac53382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.124.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:37:11:e4:29:1b:bd:11:48:01:b6:30:27:e5:df:2c:7f:56:
fb:a1:41:11:62:e0:03:6c:49:f4:e3:da:c5:72:41:ff:99:28:
9a:4f:a6:77:55:1b:12:e9:2c:6d:3b:34:c0:b5:a8:e7:05:df:
31:f4:45:5a:72:0d:f7:a7:8f:d6:46:3d:35:7b:51:1b:a4:1e:
d5:47:d1:6e:d0:f3:2a:ae:60:a9:81:4f:86:3f:36:cd:1c:69:
1b:ec:1b:37:f7:3c:ea:43:1d:95:75:03:a0:b2:f8:5e:68:2b:
18:73:b8:09:55:3e:a7:4c:6b:e3:36:a3:e6:29:3e:a7:e0:db:
6a:a4:66:f5:a9:2d:2d:8a:dd:0f:dd:e1:6d:34:55:68:f6:65:
76:80:44:10:01:87:a8:23:30:d9:af:6d:93:af:c0:0d:20:5a:
9e:fa:c0:7f:37:58:29:5f:f5:f3:ab:9f:5d:fa:8a:80:38:4b:
4b:55:c4:7f:e2:40:9f:30:35:2b:9c:22:cb:29:68:5b:c5:9b:
f1:54:60:00:03:1c:70:aa:7d:c0:a4:16:a9:6d:d9:b5:18:e2:
40:f4:ce:cd:6c:d1:ad:69:08:f4:bd:2d:ec:fe:df:9a:b1:ee:
52:dc:4d:d0:b6:fa:d8:32:79:5f:f9:db:b1:08:48:f0:be:a2:
50:a4:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:58 2025 by rpki-client