Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
File: 33faf54e-b2b5-3d79-910d-958696a77f7b.roa (raw, json)
Hash identifier: jbKwECLjKJj/4sB2xzotlj+B2aOa/lWaBFkJ1HHd0n8=
Subject key identifier: CF:83:40:4D:5E:C3:11:DE:78:37:13:5E:E9:F4:7D:B3:E7:4A:14:BC
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584802150CCCCC322F7BA8DD8E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 64267
IP address blocks: 141.164.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0c:cc:cc:32:2f:7b:a8:dd:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=c187d49e-39e1-42eb-993a-1dfc87b977b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:fc:12:8f:93:3d:28:3e:9e:e0:b6:7a:ee:
c3:4d:a1:e9:9f:92:40:ad:cc:aa:84:fa:77:c5:c0:
b4:f3:ed:8f:11:87:c7:b3:6b:65:ff:12:b8:0e:ac:
4a:42:73:40:6e:73:24:58:a9:d6:68:d3:e7:3c:df:
4b:cb:b9:3a:39:b6:71:df:be:76:42:9a:fb:23:2b:
4e:27:0f:e4:2a:34:fd:b1:37:6a:30:d0:12:f5:9a:
61:2e:60:da:a2:28:6f:be:28:81:83:c6:10:35:dd:
46:c0:dc:9c:d0:77:0f:22:c3:36:fa:04:af:76:21:
d0:41:19:b1:71:a9:00:b5:a2:a7:bb:5a:df:cb:d4:
0d:b0:e0:c2:dd:20:f9:b4:0d:40:2a:34:ee:6b:08:
02:dd:2e:a6:f8:69:d2:7d:a6:36:e6:bc:23:bb:0b:
91:01:d5:1a:f2:20:e6:ad:ee:f7:23:29:cc:2c:5c:
a3:ac:65:d4:0e:7b:25:18:e2:60:83:db:6a:f0:97:
cb:9d:78:8a:7c:e4:d0:d1:34:d2:c7:42:8f:3b:c2:
89:58:8a:aa:c0:1c:03:6c:6d:83:b2:77:6d:22:f2:
3f:a7:21:7c:bf:4e:44:6a:1f:d5:5d:48:84:b7:85:
52:74:88:a5:fa:03:ab:f3:5c:9d:78:38:d4:43:4d:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:40:4D:5E:C3:11:DE:78:37:13:5E:E9:F4:7D:B3:E7:4A:14:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
141.164.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:18:f5:14:9e:c6:cd:10:c8:21:61:ef:81:10:5b:df:b7:18:
98:91:a9:49:1b:d9:31:b0:c3:f4:70:6d:c7:96:77:a0:74:64:
50:7e:80:71:b2:f7:f9:aa:45:99:7e:8d:cc:54:f4:23:8b:0c:
ae:1c:be:88:58:6d:bd:d8:d2:67:39:76:e6:2f:48:1d:a1:1b:
bf:2d:de:7e:98:6d:fd:ad:9c:a4:2f:4d:32:a4:66:dd:e0:fd:
e4:89:d7:98:4f:b4:68:47:e7:51:5e:74:a2:d0:09:21:e6:02:
cb:ef:d4:ca:f2:5a:7e:2c:87:38:e2:18:d9:0f:a5:1b:6b:be:
dd:58:96:e2:f1:e3:46:b0:17:71:6a:3e:1a:5f:91:05:a2:1e:
f0:91:f4:1e:9d:a1:c2:67:39:09:19:0e:c4:be:7a:e4:c5:e6:
b7:e9:97:1a:b0:e9:81:f6:6a:d7:93:f0:ba:3c:3d:13:33:c2:
9b:3c:62:89:6d:85:8f:8a:b8:79:eb:56:b2:17:9e:50:54:39:
75:6c:ce:88:be:ee:eb:05:91:0b:ec:af:97:99:21:b4:7a:80:
49:cb:21:ab:5a:c7:a2:be:d2:c3:0b:8f:3c:9e:05:80:16:99:
5f:f6:b1:2c:2d:71:a6:6f:ea:3c:7b:15:d0:d0:48:69:f4:ca:
e8:b7:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:44 2025 by rpki-client