Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c09d891-6aeb-3e17-a309-1fec5b91258b.roa
File: 1c09d891-6aeb-3e17-a309-1fec5b91258b.roa (raw, json)
Hash identifier: INc2mA7uRF3l3gFrYTZ8KWtLauApgKrnTkXKsrXW3wY=
Subject key identifier: 33:36:5C:1E:DC:6E:4A:2F:C4:E9:69:44:DD:F6:3F:10:69:FC:8B:B1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492184172DE60EB464E58FC910
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c09d891-6aeb-3e17-a309-1fec5b91258b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 33656
IP address blocks: 50.242.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:17:2d:e6:0e:b4:64:e5:8f:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=987fba76-e6f2-4c6d-816b-ca05dea58fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:00:0d:f8:04:ea:d4:f3:f7:df:60:8c:fe:
ab:00:c9:f9:98:54:8c:cf:7b:c1:15:ec:ed:48:db:
39:f6:57:ba:ff:70:44:0b:90:9a:1e:dd:59:35:36:
77:a1:4b:69:5b:58:cf:f0:16:27:b7:87:62:ee:d0:
c0:2e:bb:14:b2:c6:ef:2f:43:e5:0b:63:e3:ee:75:
cc:61:e1:6a:b0:7b:f0:c9:d3:38:9b:c4:a5:95:92:
0d:6b:0b:81:79:e9:d2:db:ca:af:fc:6a:f2:86:27:
90:69:e7:b8:3c:9a:cd:a3:f9:68:79:96:3a:4c:d9:
12:31:3c:08:a5:0a:05:25:34:f1:4e:35:4b:a3:c2:
48:24:73:37:56:59:f5:df:8c:84:a0:31:42:91:b2:
d1:11:59:07:19:b9:4e:a6:e8:76:6e:d5:91:a7:7c:
c0:d1:2f:df:c9:59:4f:0d:ce:8a:aa:bc:54:cb:4e:
10:2e:49:0c:e1:be:61:db:24:6f:39:1f:c8:08:12:
46:4c:51:94:d0:56:d4:59:20:b3:29:25:c1:1e:3d:
53:4d:e2:f6:a9:34:49:87:ab:d3:9c:b7:95:23:c5:
34:03:c4:da:7b:7a:04:ca:e3:c7:6b:95:c5:a3:fd:
81:f3:39:d1:25:99:e2:00:c2:1d:f1:f5:1e:50:ef:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:5C:1E:DC:6E:4A:2F:C4:E9:69:44:DD:F6:3F:10:69:FC:8B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c09d891-6aeb-3e17-a309-1fec5b91258b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.242.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:3b:a0:61:10:36:14:ab:72:f4:dc:48:d0:1b:f6:83:13:f8:
b5:15:06:5c:86:b9:77:90:ac:f7:54:0f:37:4a:73:9e:be:ec:
f1:66:c9:35:c7:35:75:99:d1:df:d0:cc:aa:b9:d1:4f:4f:65:
49:8f:79:4e:78:ee:39:b8:17:9c:e1:60:a6:cd:7b:f0:f0:8d:
70:20:ef:4d:d2:b1:7b:15:13:68:71:d6:11:a5:8a:91:c5:f3:
16:bd:3d:65:38:e8:ab:08:b2:fd:38:80:fe:b0:fe:be:06:fe:
af:11:e3:86:59:ca:ce:76:f2:31:13:a2:86:f9:06:a7:66:93:
04:44:44:b0:bf:2c:8e:a0:99:51:57:cf:a9:91:c8:54:f0:01:
59:46:30:a1:bb:b6:a0:ac:0b:b0:dd:ef:fa:8b:84:53:1c:91:
58:97:3d:99:ba:7a:e1:cf:94:46:1f:9f:08:6e:66:7e:5d:16:
e2:17:ba:17:52:a1:66:9d:e8:83:1d:5e:2c:20:91:92:6b:95:
79:14:1c:39:7d:56:44:d7:e9:f1:5a:18:94:d7:7d:b3:74:54:
a8:6b:d0:20:64:50:18:f8:7d:48:59:14:f5:34:98:ff:b8:86:
e0:0e:56:10:db:f1:69:2c:ac:3d:b7:6c:4a:cc:2c:4b:ea:c7:
0a:56:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:24 2025 by rpki-client