Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa
File: fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa (raw, json)
Hash identifier: cRSm54viH+etBdJ4z8r3FkRDkYhdO2TVcFJZKdmEtMk=
Subject key identifier: 3D:24:DB:42:B5:D2:B3:8D:8C:91:3A:60:EB:3E:0F:DE:40:4B:B8:BB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9CF3B1DD7731F1898E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.238.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9c:f3:b1:dd:77:31:f1:89:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6e663e35-cd2e-457e-858c-6e40c8510f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:53:1a:a0:f3:c8:af:48:e7:e9:15:8b:f0:
3e:1c:cb:79:70:27:a1:df:b4:8d:58:16:d8:28:21:
94:15:dc:1f:cf:39:da:8e:c1:76:a1:6f:43:b6:44:
bc:b0:20:87:a2:a4:0c:ea:0c:4f:cb:aa:38:7b:e2:
3c:05:4c:ec:e6:c5:b0:58:cf:59:b3:fc:23:f6:bb:
97:51:09:43:f6:c6:27:11:30:12:43:07:44:a4:f3:
f3:2c:c5:d8:cf:28:e8:c8:f6:58:7f:5b:73:92:f6:
f6:22:d8:3b:1d:0a:a4:cd:06:f6:47:5c:75:f2:34:
91:af:d2:04:28:cf:4e:a3:5c:42:6e:c9:a8:5e:1e:
ae:93:98:46:ac:f9:ef:ab:32:e0:86:81:c1:39:c4:
6c:06:1d:54:06:f7:f6:a7:8a:a1:46:2e:f3:96:8e:
bf:a6:67:71:e1:b3:46:98:ca:40:6e:32:1a:36:89:
b4:a6:eb:a1:59:56:5c:4e:8a:ee:c7:60:79:0e:63:
2b:06:45:99:85:a9:a4:b0:56:bf:a8:98:18:3e:9b:
a9:f6:97:d1:08:3b:be:59:33:66:a8:fa:4d:8f:6e:
3c:e9:2a:a9:10:c8:62:2e:99:53:88:3b:7a:a8:df:
f9:20:ed:62:81:27:24:bc:1b:e1:94:90:60:a9:bd:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:DB:42:B5:D2:B3:8D:8C:91:3A:60:EB:3E:0F:DE:40:4B:B8:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.238.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:aa:cd:04:60:32:a6:76:c6:80:70:09:c6:cf:a9:f9:c5:14:
7b:d1:20:dd:9a:b2:45:7f:be:bc:a4:1d:55:2f:3e:6e:a0:ef:
2b:eb:43:f0:0b:6f:c7:71:5e:91:22:d9:0f:ef:60:0f:99:d4:
ff:d8:3d:a9:27:5c:11:f7:28:45:53:99:06:a7:5d:9a:eb:5a:
c9:fe:b9:fe:8d:be:df:c3:f4:3d:79:ff:b6:be:66:b1:bb:28:
e9:cd:ad:b3:71:28:4b:e5:7a:54:97:f7:fa:f9:c0:86:cf:85:
e2:83:29:71:c5:cb:7d:74:1b:88:59:f0:9a:6d:31:e5:71:33:
a8:13:2f:a3:31:fe:1d:29:ee:45:fa:51:be:1a:ef:fe:cd:89:
08:2c:33:ce:88:70:b9:6c:1b:bb:33:c7:19:aa:03:53:7e:ff:
ad:15:c4:e4:67:52:12:eb:04:fc:97:ed:61:98:d2:82:c9:93:
89:0b:57:8e:b3:9a:55:7f:3a:73:60:3d:63:24:6d:47:b7:9e:
2f:e9:9d:50:d5:6b:5e:8e:95:b4:3b:1d:83:19:f4:c6:13:4d:
df:24:68:f6:83:29:1d:ca:f3:ab:93:00:5b:b7:39:ab:5c:8d:
46:cc:d0:e5:f0:54:03:a5:ab:2d:c5:ff:aa:35:cf:cb:d2:f2:
f9:a6:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:39:35 2025 by rpki-client