Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f0d3158-94d7-34be-a36a-94dfb96eec9c.roa
File: 0f0d3158-94d7-34be-a36a-94dfb96eec9c.roa (raw, json)
Hash identifier: bKqlxRpIUCKlm7jpZuS0HG+BRwjMfZxw8j4G4Uq6h1w=
Subject key identifier: 22:E2:51:57:A1:60:10:B0:C3:62:A7:11:C0:79:8A:2B:D4:34:E0:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB093ECE626236AB63C4980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f0d3158-94d7-34be-a36a-94dfb96eec9c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.224.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:93:ec:e6:26:23:6a:b6:3c:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=fff9c9af-fbde-4bf0-9856-ced32bb352f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:9b:10:0d:37:76:ae:db:c6:de:0a:42:85:
91:64:cf:5d:e0:4b:e2:2c:2b:85:5d:ae:f7:15:60:
90:86:45:29:07:f7:0a:cd:16:c1:51:97:51:a7:c0:
1e:a2:b3:bd:c6:5c:2d:f4:c1:cb:96:7e:51:f2:a2:
9b:62:4c:b0:dd:de:58:68:79:86:78:dc:8d:7a:57:
1b:63:df:0f:5e:7e:02:9d:42:8f:f6:dc:3f:fa:0c:
2f:a5:14:fb:5c:2d:b2:7d:94:20:a3:fc:62:22:ad:
f7:ad:31:f6:a3:70:75:70:3e:7e:ff:29:a6:8c:29:
78:4a:c3:08:af:2f:03:09:fc:4f:e6:98:56:99:7e:
ed:7d:42:93:80:6c:93:15:f2:8b:a1:05:df:27:5c:
f5:95:f8:d1:5f:04:e3:68:40:7f:50:06:ef:82:33:
f5:9e:ed:62:57:a4:74:ae:63:e0:8b:43:17:e3:fe:
4b:75:46:f9:07:fa:8c:20:3b:7f:a3:ac:4d:eb:0f:
e5:df:72:02:19:b9:58:e9:2d:52:bd:f1:00:b8:cc:
10:dd:35:f0:3d:13:f1:01:3e:39:4e:94:f3:c7:d0:
a6:4e:22:4e:9b:fc:7a:88:22:af:0e:92:f6:e1:2a:
99:e5:7c:d4:a0:77:50:f0:9e:a2:18:5d:70:af:bd:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:51:57:A1:60:10:B0:C3:62:A7:11:C0:79:8A:2B:D4:34:E0:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f0d3158-94d7-34be-a36a-94dfb96eec9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:49:57:6a:b0:46:25:9a:b0:14:d1:71:ac:9d:56:fa:3c:54:
f6:49:d7:0c:97:26:11:c2:18:14:87:e2:36:54:b2:4b:77:a4:
df:fd:c1:22:8b:6a:8c:f0:5a:e5:ba:89:f4:99:2a:74:d7:ef:
73:8f:40:a7:58:87:ca:89:b4:8b:e6:2f:74:8e:f6:dd:59:1b:
2f:d8:53:ca:ba:fc:cd:e2:b1:14:5b:ed:97:3b:31:45:42:5e:
d5:3f:69:48:28:9a:e2:42:79:ea:28:c9:93:ab:22:b4:6e:cf:
b2:2e:e0:c7:1d:66:ce:bb:87:dd:c8:dd:45:13:b5:5a:50:0e:
43:da:70:f7:01:b2:66:13:32:0d:dd:c3:c7:d6:6a:c1:99:f1:
92:bb:7c:1d:79:86:d8:9f:65:88:36:7a:7a:54:e2:eb:90:dc:
2d:74:2f:ea:14:05:b7:02:c9:ce:83:2a:a6:a1:f4:7e:3f:63:
98:76:87:b9:dc:ff:81:b7:c4:eb:aa:0d:3b:fe:1d:5f:12:35:
49:15:67:2c:1e:56:17:23:cf:b3:da:bf:0b:98:94:79:1e:6e:
b6:d0:3d:92:ce:c0:0e:f5:a6:77:de:60:22:c2:02:6e:7e:3a:
56:c0:f9:8e:c8:91:c5:13:45:a4:97:42:a3:92:6b:fd:76:1c:
86:36:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:57:14 2025 by rpki-client