Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27a3bae5-467a-33b5-9639-b3261b02bac0.roa
File: 27a3bae5-467a-33b5-9639-b3261b02bac0.roa (raw, json)
Hash identifier: uTUWAD053WJX9rs6gJeWMUz+pBWyqu32OYPUCgG8Xus=
Subject key identifier: FC:53:64:50:89:73:E1:ED:02:04:38:D2:CA:DC:2A:82:25:09:C9:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6F9EF1A5782BB4E304EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27a3bae5-467a-33b5-9639-b3261b02bac0.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.91.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:f9:ef:1a:57:82:bb:4e:30:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=070d972d-69a4-4108-9c48-fc1314b81ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:af:81:00:b1:3c:70:95:cb:80:90:05:b9:
90:8f:7d:a0:f4:bc:4d:e1:d0:da:b3:59:66:0b:d8:
7b:e5:49:1e:56:1c:fb:51:84:8f:93:30:5f:ae:5c:
aa:58:af:3e:8b:b5:be:1f:1c:0c:4f:55:5f:d6:3c:
23:40:4b:6b:a9:51:f0:39:04:04:54:be:a6:06:c0:
37:c7:f6:b3:52:a0:7a:dd:e1:c3:36:fc:4d:49:ea:
db:36:30:00:77:58:81:60:ad:a3:9d:20:8c:52:b2:
0e:bf:fd:4f:00:bb:ce:b8:e0:cc:73:f0:de:12:60:
db:ff:55:25:90:63:39:a1:29:8e:35:33:04:18:5b:
e1:ba:c5:99:41:14:48:68:d9:f4:4e:4c:64:2b:88:
fe:97:99:5b:a9:fa:81:ba:c3:25:70:2d:d4:17:f5:
3c:27:62:7b:86:cb:26:a4:1d:c4:b1:c4:26:4e:25:
a7:22:d5:54:7e:b5:f4:1a:a6:47:8f:f5:ba:86:d6:
68:1f:ac:9d:59:79:8d:31:b8:45:57:25:9f:1b:b6:
31:e4:78:fe:b9:84:00:99:f5:18:a2:89:31:51:9d:
4a:89:0b:dd:a5:fe:a5:0b:2f:3f:41:c5:84:20:c2:
2c:fe:ae:f6:c3:25:2d:3e:58:4b:a8:05:5c:d1:06:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:64:50:89:73:E1:ED:02:04:38:D2:CA:DC:2A:82:25:09:C9:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27a3bae5-467a-33b5-9639-b3261b02bac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:f5:d8:c4:2d:4f:68:ec:6c:1a:e5:35:ed:72:a8:6a:d7:ea:
21:14:30:5a:67:68:e9:01:67:f9:97:52:80:6b:0b:4d:62:f3:
7a:7e:ba:46:46:45:fe:8a:d9:84:79:9c:60:a3:0c:11:c8:91:
6f:0f:95:23:75:bf:5b:ca:3c:e6:cc:4b:c8:6b:3e:ba:a3:72:
a4:ef:81:77:22:20:c5:53:e3:28:45:92:74:18:38:11:37:64:
10:68:98:41:25:d1:bf:d0:80:ef:b9:d1:99:d5:cc:d1:1c:25:
3f:c1:b8:90:1f:12:db:31:2c:28:af:e5:6a:ca:cd:b2:cd:70:
b9:5c:ad:b0:ba:4e:b4:d5:7f:d2:e7:50:7a:d3:d4:d6:9c:68:
bc:cf:16:52:1c:46:03:50:8d:a1:cd:3d:b1:cf:1c:f6:5a:04:
be:83:47:c5:60:f4:30:92:3e:c9:c0:9c:5b:34:cb:b2:1f:0b:
92:36:ac:de:2b:53:99:ad:b3:71:44:da:ad:6e:c9:18:92:39:
4d:0e:32:ca:d6:3a:24:69:90:d8:77:ca:89:15:7a:ff:e0:88:
0b:33:cf:1d:6d:df:98:dc:db:d7:7b:01:b4:a3:f9:ad:28:80:
3d:57:ef:7b:43:4d:d7:02:13:8f:25:0f:1e:c5:35:b2:2b:a1:
02:f9:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:21 2025 by rpki-client