Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa
File: bb072b22-497b-31d1-8292-b571a807b727.roa (raw, json)
Hash identifier: 7mG/heMiOOwp/QprAQsuaSCRLDNnylfTKXPS4pCEQmM=
Subject key identifier: 1B:66:3E:F3:3C:39:47:B8:C0:84:AA:F7:20:0D:67:9C:2D:C1:D7:F5
Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial: 010D0C9F432858487755C7B31E688F1720550600
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 138699
IP address blocks: 71.18.255.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:c7:b3:1e:68:8f:17:20:55:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=7b155b68-827d-4eb7-b48e-03db16b88d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:23:c8:2f:47:d3:fa:82:18:53:5f:ce:09:
7b:cc:27:f0:94:fe:0b:23:0a:b4:97:67:6a:94:e4:
37:c9:0a:26:fd:61:ca:df:80:26:bc:1b:ac:99:3f:
06:c6:82:79:dc:ba:f2:34:b6:7b:6a:e1:93:b3:ca:
78:9a:87:cd:7a:b2:67:8c:7e:ee:9b:9d:f6:8c:b6:
96:9a:d7:1c:25:52:27:c0:26:8f:76:69:d4:0e:54:
2e:48:b1:4c:f2:1e:1a:94:14:62:58:a2:34:b9:29:
75:df:9c:7b:c6:df:4a:78:fa:15:00:19:8c:d6:44:
f2:69:bf:34:76:d1:0f:16:cc:a1:2b:f5:f5:b6:21:
28:99:79:27:62:93:06:ac:3d:16:6a:a5:85:a0:7b:
63:65:58:23:1b:e2:b4:23:e2:d4:5c:ab:4f:5e:55:
28:9c:02:bc:16:26:8c:b3:a6:3e:47:78:e5:3b:c0:
63:7c:70:73:e2:a4:76:5e:9c:fb:fc:d9:13:98:93:
22:9d:5f:fd:6e:5f:60:3d:51:bd:2d:06:76:03:1f:
1b:8d:6d:c9:20:e8:75:3f:68:95:11:85:6c:ff:6f:
98:08:d0:84:a1:39:f7:18:4c:62:bc:c0:5f:10:15:
5d:21:4b:84:78:13:be:c9:d1:dc:00:c5:1d:bb:1d:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:3E:F3:3C:39:47:B8:C0:84:AA:F7:20:0D:67:9C:2D:C1:D7:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
X509v3 Authority Key Identifier:
keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
sbgp-ipAddrBlock: critical
IPv4:
71.18.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:a2:d3:5c:2a:52:a0:ef:c0:eb:be:6d:a9:dc:1c:35:56:b3:
e6:d3:07:64:38:87:26:ad:84:2b:ad:27:73:c6:14:ec:28:6e:
05:5a:0b:5d:2a:49:2f:ec:29:2f:a1:74:91:77:3e:ac:4c:ad:
95:9b:16:dc:0d:13:02:6d:83:24:82:62:10:b2:b0:5c:4d:de:
9c:d2:c7:2c:e1:91:29:72:fa:77:6f:b9:ec:55:96:99:19:66:
69:ee:2b:7b:24:9d:3b:bd:07:5f:3f:b4:81:8e:45:67:78:5f:
b1:1b:d7:7d:f2:c3:21:fb:8f:49:e5:06:68:1b:56:5d:c4:bd:
18:6d:5b:71:e0:86:de:5b:01:b1:34:60:50:2d:02:f6:f5:01:
d9:9c:25:30:c0:a8:f7:44:e1:5b:0c:bb:b2:ae:a6:97:13:71:
da:79:ec:be:49:39:3d:bd:25:91:1c:3d:7b:8c:d5:fa:9c:0c:
ea:1e:17:df:1d:eb:b9:1c:de:29:b5:86:fb:2f:b2:be:c5:ff:
5e:79:de:3a:9a:98:25:a2:04:b2:53:75:82:68:2f:c0:cd:e2:
01:f0:4a:bf:19:78:98:64:bd:7f:62:bc:19:f2:b2:2a:d2:05:
bc:3f:9c:46:50:04:17:d7:03:64:55:f6:c6:09:f2:b8:6f:5f:
5c:6a:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:23:56 2025 by rpki-client