Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2564a92b-b5a4-3c25-9f77-292c7ecdff32.roa
File: 2564a92b-b5a4-3c25-9f77-292c7ecdff32.roa (raw, json)
Hash identifier: es5U1dsWvyZRukBvxO2FEkAiJt3KyWndQa4qrt9O+b0=
Subject key identifier: CD:8E:6A:56:AE:1E:C2:E9:E0:11:30:B1:9C:D7:D8:AD:AD:19:07:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB145BB7A56B2FDDB5557C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2564a92b-b5a4-3c25-9f77-292c7ecdff32.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 76.139.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:45:bb:7a:56:b2:fd:db:55:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=076f0c1b-8725-49b5-a9fa-32e4cb9d3327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:bd:fb:99:55:22:24:d9:3c:5f:0f:26:65:
5a:a7:42:3c:ab:b5:ab:4b:03:da:06:a7:18:7c:14:
e9:9c:4d:33:5b:39:9c:8c:50:b9:7b:70:d5:c6:8d:
cc:a3:64:28:30:97:20:58:ac:cc:7a:4f:c8:db:f9:
e5:41:d1:31:53:02:25:7f:59:3d:7e:67:b2:f3:39:
59:ee:d4:37:95:a4:24:ec:00:10:4e:91:4b:28:f0:
b0:03:8c:48:3e:40:2c:0a:18:7a:f9:51:8c:b5:fb:
79:fb:75:c1:b2:b0:e1:40:d9:97:24:92:f6:b3:aa:
10:51:b3:75:a4:9e:84:ef:10:4f:2d:cb:43:d5:fe:
6a:63:f4:c5:e7:e4:36:6c:f4:3f:bb:01:10:eb:b0:
1b:48:01:52:c6:4a:ac:f7:0c:38:69:cd:5d:8b:40:
8b:0a:1f:9a:e4:ad:68:c3:6f:3c:f3:a7:a3:9c:a8:
21:e3:21:24:0d:44:19:b8:3a:fe:28:0a:2e:ed:72:
db:c6:10:5d:e0:32:e7:20:0d:58:84:0a:ac:f3:d1:
cf:a9:2b:b7:d8:7e:d5:20:9b:f1:ef:1c:e4:2d:fc:
4d:be:88:a6:64:ff:2f:db:97:be:c8:df:48:99:b2:
77:6a:57:b6:17:79:66:74:db:51:a4:b0:ef:a9:f5:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:6A:56:AE:1E:C2:E9:E0:11:30:B1:9C:D7:D8:AD:AD:19:07:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2564a92b-b5a4-3c25-9f77-292c7ecdff32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.139.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:ac:e1:59:51:db:a3:5a:dd:2a:7f:7f:02:06:83:85:0e:b8:
26:95:d4:90:23:bf:cf:55:fb:fd:9f:f0:85:d0:c1:fb:de:9d:
31:7a:c1:15:c7:18:cf:a2:92:68:cf:7f:98:bf:70:50:0a:d5:
e7:ec:bf:be:24:ec:75:3f:37:1f:73:cc:ec:e8:99:9a:93:31:
0b:fa:0a:3c:84:42:21:df:c8:7f:85:e6:22:1a:e1:7c:0f:61:
19:c7:db:5a:e7:e9:37:4c:9a:42:3d:da:eb:15:ce:8a:51:a5:
0f:e0:bc:ac:98:aa:cf:30:c7:e4:6b:b0:cf:5a:25:5a:78:d2:
12:ef:cc:bf:02:cc:e7:a6:c4:74:7d:c7:c4:73:da:3f:02:70:
b4:a5:ee:fd:b3:c8:62:db:a4:cf:86:b7:7b:c3:54:fc:d4:01:
5b:2f:72:34:e6:99:11:39:80:0d:a7:a8:0a:29:bc:31:ac:31:
c4:e0:e6:58:73:82:9b:e5:2f:99:9d:1b:fc:2a:cd:5a:05:48:
a2:17:8f:27:c0:c8:39:73:ec:e6:3e:58:49:21:e4:2e:ac:83:
d0:a8:20:9c:91:5e:76:08:8f:eb:06:6b:b2:3f:13:9a:47:aa:
bc:76:75:ba:ab:0f:21:fe:82:84:c4:7f:6d:b4:de:14:73:40:
a4:6a:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:30 2025 by rpki-client