Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd3a9c54-9a7d-3de5-bdfa-af113f51d45a.roa
File: dd3a9c54-9a7d-3de5-bdfa-af113f51d45a.roa (raw, json)
Hash identifier: iJzibqhQ+1PzzMPBOQSA7fT08A1oiTN5gfw9NKSWU0A=
Subject key identifier: 3E:A0:CD:43:2F:97:52:8B:B6:D7:F3:C3:4A:5A:FA:E0:C3:5C:E0:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814402C03892C7F3D09A36F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd3a9c54-9a7d-3de5-bdfa-af113f51d45a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 76.143.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:2c:03:89:2c:7f:3d:09:a3:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=260b22ee-c910-4e8e-93b9-67198ac44d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:a8:1d:6a:de:ac:ad:b8:68:33:5d:3f:4d:
02:6d:17:84:ed:ac:57:3c:de:86:13:ad:b0:44:e1:
e0:b8:d7:65:42:00:69:3f:48:20:8f:44:20:4d:a1:
8b:8c:91:ba:e9:c8:1f:a5:78:f2:b6:21:50:90:05:
71:09:fb:41:dc:12:18:d2:f7:a5:3f:3c:bc:e7:8a:
63:64:c0:c3:b1:3d:56:4e:f0:ae:98:bf:db:b8:f3:
08:92:c7:8c:00:14:9a:d9:99:99:74:5e:9d:ad:e5:
cb:55:5e:d0:07:04:43:f1:c8:05:19:3f:92:df:67:
d6:91:42:ef:af:95:49:cc:d1:1c:5e:8b:ae:64:55:
a0:36:7a:c0:d9:94:c5:a2:12:8e:02:aa:9d:0b:cc:
cd:f4:62:3e:5b:2e:1f:bc:05:8e:ec:7b:da:54:b9:
d8:2a:43:05:87:0d:4b:df:9c:15:e0:72:75:87:6c:
6d:d0:67:a2:04:e0:eb:05:68:70:ad:58:8d:d1:95:
cc:1c:98:93:80:14:bc:a7:f0:64:aa:6b:68:73:d1:
92:e5:dd:75:95:d7:a9:6c:47:23:83:1a:90:c8:b9:
fd:fa:54:d0:5a:62:03:08:f4:1a:f3:84:4f:5a:45:
59:a5:5a:3a:15:4f:31:9a:a8:a8:f9:cd:d9:9e:50:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:CD:43:2F:97:52:8B:B6:D7:F3:C3:4A:5A:FA:E0:C3:5C:E0:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd3a9c54-9a7d-3de5-bdfa-af113f51d45a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.143.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8e:2b:b5:0b:ed:bc:68:12:ff:74:59:e3:91:ce:94:c2:15:
69:03:14:d3:52:f1:18:2f:90:38:4f:3e:dc:f0:fb:32:14:1e:
7b:98:d9:11:1e:39:25:4b:5d:d7:40:a4:51:40:6a:48:25:aa:
ee:17:88:5d:90:3d:5d:4f:b4:d7:56:92:c1:41:c5:4b:b0:62:
e8:b4:fd:78:d2:2d:2e:52:84:3b:cf:e7:16:d5:2b:3f:2c:75:
5d:2b:d4:29:7b:b4:66:c0:56:27:7f:7d:e1:5d:a6:ae:3f:6a:
be:fd:93:3d:00:3c:e1:bb:e2:27:27:2a:3c:ac:cc:96:8f:14:
bc:ba:64:a4:d3:a9:19:e0:10:32:df:b5:25:b2:d1:83:e3:a5:
9d:16:d6:37:5a:ec:3a:f2:06:19:d1:8f:24:03:4c:53:a7:c3:
bc:b9:4a:77:fe:f8:f5:b6:9f:63:72:9a:45:ba:b7:78:32:d9:
40:42:4b:7a:2d:a6:d0:60:6d:35:14:97:1c:8c:ef:8c:c8:65:
a5:1e:d3:d1:74:78:10:f0:ad:3a:86:25:6b:18:51:9f:55:27:
c1:3f:8c:fb:c4:c3:4f:29:24:1b:9a:d6:2b:ff:8c:01:60:44:
ed:3b:76:aa:de:11:e3:0f:5b:bf:54:d1:89:91:99:a7:ba:c7:
4c:6c:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:02 2025 by rpki-client