Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/290f7cab-3daf-32ed-866d-41c973e7bc01.roa
File: 290f7cab-3daf-32ed-866d-41c973e7bc01.roa (raw, json)
Hash identifier: uCM6jdRvxus9RbkT7hUb/VtAyIwMS/Chey3GM/wI/2w=
Subject key identifier: 85:D9:CF:35:9F:49:6D:B3:BE:36:D6:50:DC:FD:09:C6:D9:DF:DD:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF07087CC5E2C24265E6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/290f7cab-3daf-32ed-866d-41c973e7bc01.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.225.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:07:08:7c:c5:e2:c2:42:65:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=908c9fe4-e0a9-44d2-a9d0-f024036158f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:7a:3b:5d:13:c2:f9:68:2e:b0:1e:73:86:
e4:1a:ff:dd:87:d6:f5:e1:cc:b0:22:34:92:01:71:
7f:59:fc:f0:c9:28:4e:31:60:d2:92:9d:59:b6:42:
cf:9a:bc:6a:4d:cd:67:06:f9:18:a2:6a:18:85:73:
42:4e:d1:d2:a5:8c:cd:00:1c:29:c7:01:b7:1a:52:
4b:a3:cb:c7:da:3e:a5:ef:50:e9:dd:b2:1c:d8:42:
d3:33:c4:4b:ad:d2:be:95:b7:28:b7:4e:19:46:08:
d3:87:48:8f:39:9b:5b:41:62:23:02:eb:17:ee:61:
9e:11:eb:c3:f4:ec:ad:5c:50:38:73:4f:6b:17:34:
05:4d:44:19:b5:3f:53:e6:e0:58:73:1d:c3:a2:ca:
c5:28:dd:76:ac:ae:64:e2:9a:88:65:47:84:00:b2:
95:53:1a:bd:0a:6c:58:6b:31:f6:44:1b:d7:bb:4b:
c4:64:08:68:37:3e:91:b9:6b:e9:80:88:d6:5f:fd:
d8:bc:f7:8a:e5:64:f7:8b:8d:cc:0b:d7:e5:9e:fe:
7e:65:a2:93:92:e3:1d:77:6a:4a:3b:80:95:71:47:
44:8a:82:87:c4:2f:be:f9:30:f3:bb:d4:69:f1:93:
73:96:95:59:89:4c:0c:d9:f3:2b:25:12:f6:57:97:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:CF:35:9F:49:6D:B3:BE:36:D6:50:DC:FD:09:C6:D9:DF:DD:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/290f7cab-3daf-32ed-866d-41c973e7bc01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d3:af:f3:47:38:89:24:7e:f6:b2:89:33:3c:c6:96:e6:1e:
6a:9f:36:d9:90:7b:cf:78:5f:b5:f8:2e:94:60:17:02:2e:f0:
3e:f6:0a:78:2e:5f:8f:80:c6:5f:be:09:c3:7a:bb:88:9f:d1:
08:8a:cd:7b:ba:6a:3d:b0:e4:5d:5e:d5:7a:e0:4c:00:e8:fb:
38:88:eb:d1:49:d0:78:b0:3f:2b:ef:2c:9a:f5:aa:da:5d:41:
0b:6e:02:fa:ca:4b:a2:8e:d0:63:30:60:51:07:ae:d8:7c:75:
77:4a:e2:8d:1c:73:ff:17:ce:7c:89:45:44:34:8d:94:2e:e3:
f6:a6:84:8c:21:1e:cd:b0:24:9c:ea:06:ae:0b:92:8b:47:a0:
af:76:3a:e6:b7:1b:0f:cf:d1:b1:b3:94:c6:ec:68:fc:2d:90:
22:cf:d5:f7:58:c5:84:f9:77:82:7e:55:d6:77:61:13:a8:1d:
41:1a:cf:7b:71:2a:7c:95:76:ef:17:c0:df:02:36:ca:f8:61:
b9:5e:06:ea:0a:d8:db:52:5b:0b:52:d0:66:f4:5d:c1:08:36:
14:3b:e2:14:41:62:3b:ad:0c:53:03:fa:5b:ee:fc:65:aa:f8:
d8:69:9c:21:fa:36:3e:8c:41:e4:1f:75:b7:69:6f:f5:06:c7:
91:a1:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:50 2025 by rpki-client