Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21248246-1fa5-399a-ad09-9903502de356.roa
File: 21248246-1fa5-399a-ad09-9903502de356.roa (raw, json)
Hash identifier: AIA1IHdj5RrzQHNA359D1VOAh0hF36FPXyXll6d0Y90=
Subject key identifier: 2C:E4:24:6C:2D:32:D5:96:D8:A7:9A:C0:C7:FB:54:07:31:F3:0C:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C9DEDCB002DB2EA9ACD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21248246-1fa5-399a-ad09-9903502de356.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 107.1.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:9d:ed:cb:00:2d:b2:ea:9a:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ad2a7069-e5e2-4c57-8b97-09de4497dc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:d2:58:75:d6:3b:1f:3e:98:b8:12:76:fa:
81:d8:d7:71:79:ff:36:bd:42:da:f9:51:f4:d2:36:
33:95:b3:5c:de:2b:ee:8e:09:48:72:d1:17:48:91:
05:f7:05:7d:3d:5a:8b:10:3d:91:18:8a:f9:04:c6:
36:af:94:5c:6c:4c:ad:4c:95:83:66:ac:aa:79:a1:
68:b7:82:a0:25:5e:3d:6d:51:c4:3c:61:95:77:8d:
9a:74:6d:ea:25:d8:84:ac:41:f1:0a:96:8a:24:4f:
29:0f:4f:9a:3f:ea:6a:f7:9e:4b:68:24:70:f5:f0:
a9:72:bb:a9:02:8b:a8:49:04:c5:9d:ab:09:1d:a4:
8e:27:84:3c:f2:ec:f2:64:07:14:17:44:e2:62:34:
e9:52:aa:35:83:0e:cb:ca:8a:d5:29:0f:bb:92:36:
67:01:ee:a9:01:31:c4:08:7f:81:c9:98:78:98:a6:
05:75:94:51:95:a0:42:b7:7a:3a:6f:fc:2a:85:d7:
ce:7a:78:3c:35:d9:72:58:f3:03:aa:fd:25:e7:fc:
bf:de:93:90:c3:eb:37:c4:34:25:57:6f:a7:de:45:
d3:d9:d1:8c:5e:3d:c6:b0:65:b3:a3:ac:c1:58:ae:
5c:e3:8f:e1:de:01:83:d3:25:71:1f:c2:dd:73:98:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:24:6C:2D:32:D5:96:D8:A7:9A:C0:C7:FB:54:07:31:F3:0C:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21248246-1fa5-399a-ad09-9903502de356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.1.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:7f:89:1d:46:5b:f1:ac:06:49:8f:67:bc:27:5b:5e:32:e9:
94:df:0d:65:e8:2c:07:56:26:58:b5:fc:99:69:12:83:54:c2:
40:a1:19:3f:6a:c1:23:3f:ea:9a:f1:2f:4b:46:94:e6:f6:ad:
af:8c:e3:da:b1:c1:90:df:cc:90:db:9a:43:b3:f4:a5:d1:3a:
c4:e4:c1:36:d4:1b:68:77:5b:9e:8c:67:df:ab:78:4d:6e:ad:
17:00:93:54:a1:2c:5b:6d:e7:d2:ed:63:a8:7b:a0:74:80:43:
10:00:9f:f6:5b:c6:39:b3:ea:a1:1e:ee:c4:cb:86:0d:c9:31:
ae:cc:af:c2:c1:54:0d:d9:03:2c:f3:f1:4a:86:81:98:46:0b:
8a:1a:e0:0b:e0:3f:5b:60:bd:b3:7d:ef:64:05:fc:98:16:c9:
d4:a0:07:54:3c:87:6d:77:2a:1c:cb:8b:06:9e:4f:f0:0f:0f:
63:e7:67:b4:fd:93:c0:13:82:3f:d2:ab:0e:5d:d7:d3:aa:5a:
8d:49:09:62:92:01:38:92:33:a5:82:32:c6:c5:4a:71:48:fb:
f8:ea:51:31:98:df:da:98:e3:17:64:fc:30:e6:e9:71:d1:c4:
41:e6:9a:74:c9:eb:d7:26:a0:fe:53:d0:97:0e:ac:2f:a6:a4:
15:60:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:49:31 2025 by rpki-client