Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b5a5db2-c46b-3256-9b82-2f2441c30d7e.roa
File: 2b5a5db2-c46b-3256-9b82-2f2441c30d7e.roa (raw, json)
Hash identifier: sXY6F4hj0vQvE3ccrUKtLsXC6GAvNXSDGK/i7wIVot8=
Subject key identifier: D1:A0:CC:7D:BF:42:9F:D9:BA:12:1A:11:BF:3E:67:51:05:88:F1:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C58039F3206B1238319C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b5a5db2-c46b-3256-9b82-2f2441c30d7e.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 76.138.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:58:03:9f:32:06:b1:23:83:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=3a44447c-ba19-4252-a110-c13f771f58fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:b4:8f:cf:f9:ee:ce:d3:51:ee:8c:24:a5:
07:bb:50:57:1f:04:a1:69:c6:10:d5:a3:41:7b:f7:
ed:fb:da:5b:82:bd:e3:c2:91:68:24:a8:ba:83:c0:
cb:84:52:be:79:ab:b7:90:8f:b4:51:d9:e8:d0:60:
ea:4c:f9:98:d7:3c:40:e7:0c:89:5a:63:61:9c:3d:
ef:b1:38:49:88:29:bf:ec:a2:ce:8e:42:cb:7c:8d:
ac:58:6c:0f:15:fd:88:97:ce:dd:14:f3:0c:5e:bb:
cb:e4:49:31:58:bf:7b:2d:ff:da:43:85:07:0c:81:
7c:99:e4:d6:26:c3:7b:e4:3e:a2:3d:c1:ce:d2:d1:
f3:b9:15:15:8b:d0:47:8c:5e:51:34:df:eb:4c:a4:
d2:07:af:bf:0a:94:c0:0b:5d:23:43:e3:8f:c6:f0:
50:d5:fe:08:c6:e5:93:e6:43:56:69:a5:df:90:22:
e5:ee:51:64:05:de:9f:9a:89:8c:5b:48:29:dd:21:
c5:25:c2:79:7b:b8:ae:40:a3:32:8b:d1:1a:80:9b:
74:26:82:78:ed:2a:38:ac:31:ba:76:63:c1:97:ec:
25:7a:75:2e:7a:06:72:e7:d5:3f:78:fe:49:7e:e7:
a2:63:3e:2d:08:96:85:a0:d6:fb:22:d6:f1:7f:a8:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A0:CC:7D:BF:42:9F:D9:BA:12:1A:11:BF:3E:67:51:05:88:F1:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b5a5db2-c46b-3256-9b82-2f2441c30d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.138.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:4f:8f:ac:4d:77:ee:ae:4c:a9:6c:09:8c:92:61:74:20:69:
da:bf:0b:63:be:f3:db:af:c2:b0:e4:b2:07:12:d4:b8:ca:52:
e4:2d:44:85:10:93:8a:13:79:34:90:31:91:c6:49:bd:99:c8:
f5:3d:91:ca:37:5c:e1:52:24:ab:03:72:ec:f4:44:e9:b2:7a:
77:a2:31:57:83:08:12:88:cc:ff:08:f9:14:e2:24:9c:17:5c:
0a:e5:1f:c5:a7:66:c8:43:9f:e8:36:79:e1:e5:5e:cc:40:51:
8c:fe:ab:19:c7:0f:8b:86:dd:f4:8c:f7:9a:ae:ab:34:e0:75:
ec:7c:84:10:91:1d:90:42:93:71:a1:bf:67:1e:fe:b3:e5:ba:
48:37:06:09:9c:6e:43:f9:97:7f:ba:bc:6d:b8:58:2d:70:89:
84:18:1d:3a:7b:0e:3a:49:b9:6f:84:9f:e0:41:b2:f3:21:ff:
9d:3f:87:ae:0e:10:c4:e1:d7:91:e2:1f:63:9a:df:f9:13:fc:
df:9f:b2:fa:c0:db:87:aa:57:d8:87:81:36:a4:8a:08:10:90:
90:b9:94:b4:31:c6:3a:83:b1:16:12:a1:31:eb:14:9b:34:a1:
12:b8:ed:9f:0e:32:d1:17:91:44:75:aa:c1:ce:ea:c2:e8:72:
b0:ad:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:52:21 2025 by rpki-client