Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
File: 0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa (raw, json)
Hash identifier: IacbvWN/eYEfpJ37Q01aFGIz2s+SCEzMOtSYHAtHsOM=
Subject key identifier: A8:BF:3F:8C:74:48:3E:36:D2:D3:8E:56:18:94:2F:BD:DA:A2:A1:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CA98CCED4BD118B30AFF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33657
IP address blocks: 71.200.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:a9:8c:ce:d4:bd:11:8b:30:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ff4dfab5-1d83-48bd-92aa-897f0c8bfd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:d2:df:c9:a9:2a:f5:85:6e:7b:af:b4:3d:
fa:2c:48:4c:8d:c6:2d:f1:ce:3a:00:a6:14:87:9b:
4e:60:16:c9:c4:f6:1d:6b:06:ef:d4:68:31:5f:b5:
0d:43:3e:e3:0a:42:0c:c5:c5:7b:af:49:f1:f6:b3:
f6:fc:8a:17:46:87:71:32:b2:7b:f2:b2:13:4c:9a:
38:01:c4:c7:94:8b:33:be:78:6d:23:2d:ec:b4:07:
ff:4f:98:e8:51:00:0b:d5:23:5f:7c:20:54:f6:d7:
c1:bf:7b:fe:c9:72:07:7b:e8:13:f0:10:c7:f5:e2:
ad:e2:08:36:a0:72:0e:c4:04:e0:ec:ef:7b:d0:72:
69:11:08:0f:07:e3:18:83:1f:dc:af:20:85:21:13:
e4:8b:0b:b3:72:54:9f:b6:d5:81:f5:a7:96:c9:44:
93:e1:7f:45:1c:3c:5a:f1:8b:1d:4d:24:31:35:c6:
0a:52:ec:65:a4:74:be:cf:9c:3d:72:cc:67:a7:38:
fb:4d:90:76:1c:f8:e1:72:eb:34:3d:86:1f:6f:94:
d8:38:4c:1e:14:b5:65:c9:d3:01:af:ac:22:81:bb:
d3:24:d2:77:b1:03:cf:be:bd:e6:77:f4:9e:aa:1d:
98:a6:7f:0f:4f:8c:ee:84:13:ad:37:9a:91:b2:dc:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:3F:8C:74:48:3E:36:D2:D3:8E:56:18:94:2F:BD:DA:A2:A1:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.200.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:da:0a:6f:ee:4b:85:9a:61:dc:4e:c2:2a:8f:0c:5a:77:90:
c8:6d:4b:b6:f7:62:c0:14:2e:8a:27:a8:3d:f8:cd:8d:2d:9a:
6a:d9:15:ea:fa:39:85:c8:f6:8b:44:88:78:e3:a4:7b:43:9d:
ed:a4:2d:cf:53:a7:95:80:c0:6e:e6:19:26:38:2d:9d:14:7e:
16:8c:04:07:a5:21:9d:06:17:09:d2:d1:e2:5f:ca:9f:cf:ed:
15:76:7c:f9:6f:8c:a0:89:fe:33:60:c0:ee:a2:78:58:02:1c:
45:21:b1:1c:ae:32:f0:89:9a:20:75:ae:b3:fa:17:6e:fd:dd:
87:f6:66:ce:34:c6:8f:a9:24:5a:b9:96:cb:79:98:1a:3f:31:
ae:e9:2b:7d:94:72:71:0c:e1:b6:ff:da:17:02:fd:6a:a2:a3:
37:9a:8c:53:d9:e7:bc:82:4a:17:84:fb:e4:04:65:90:c9:d4:
f8:4b:8a:e7:4d:cb:39:42:37:09:ec:43:ed:c7:66:fe:6b:7c:
84:11:f9:1f:ed:b8:56:7e:fb:d9:f3:c6:2c:de:1d:e3:f1:b9:
57:59:5f:06:e2:d9:5f:a7:c5:2e:0b:6d:41:8f:be:d3:46:98:
7f:dd:67:f5:bd:3e:ec:dc:82:e1:a3:d4:64:6b:92:0f:23:f7:
cb:ac:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:02:44 2025 by rpki-client