Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d70e98b-2921-3ef0-8d5e-ceeb782381d9.roa
File: 2d70e98b-2921-3ef0-8d5e-ceeb782381d9.roa (raw, json)
Hash identifier: oZijI/4iLMkyg7JfsEJNzBumbn8if8pRf7mxMpJ33rU=
Subject key identifier: 4E:51:37:4F:F2:2F:60:6C:72:27:2C:E9:A8:5D:23:31:CD:1C:BC:A0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DA206749B955FFCB7EF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d70e98b-2921-3ef0-8d5e-ceeb782381d9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 75.146.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:a2:06:74:9b:95:5f:fc:b7:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8686660a-1590-46d9-a14f-f2d47af88f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:5f:62:33:b5:79:52:0f:ce:9b:06:c5:19:
ec:15:18:25:b3:7b:4f:86:6a:6b:7d:38:34:58:8e:
f6:99:91:48:b9:75:e9:61:9d:1d:27:ae:95:99:30:
0a:cb:2e:c7:e5:84:1c:69:e1:d7:65:a1:ac:ae:7e:
b1:91:ba:b2:c9:0f:5a:eb:a4:d2:1d:f3:50:64:65:
b3:7e:7d:08:97:e5:f2:44:32:61:12:9f:e1:76:c6:
8b:5c:a7:4e:09:85:13:7a:15:e0:2d:6e:8c:1a:7c:
4b:a8:75:9b:c4:84:4e:66:97:9c:0c:7a:80:cf:7c:
62:08:82:9c:7a:93:41:c6:12:0f:f9:0d:23:b5:28:
a5:bb:b8:af:33:83:40:89:cf:7a:42:59:d0:d0:c0:
ee:05:3f:06:f0:a8:c7:93:b3:5e:fb:c7:38:ec:ea:
44:3a:b0:48:3e:1e:eb:e9:58:5f:39:7d:0a:87:75:
f0:69:27:5f:f5:b9:9a:9a:29:21:d7:84:af:6e:82:
d5:54:75:6d:b9:a7:0c:78:c5:cb:e6:a0:8e:34:71:
7e:4c:70:7c:61:46:d1:95:3f:7f:eb:b4:50:40:2a:
ab:47:13:36:15:a1:36:59:c9:8d:cd:76:ce:f8:2c:
73:b6:a8:6b:80:4e:61:f3:06:20:0e:0e:f1:ee:e2:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:51:37:4F:F2:2F:60:6C:72:27:2C:E9:A8:5D:23:31:CD:1C:BC:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d70e98b-2921-3ef0-8d5e-ceeb782381d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
75.146.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:86:7e:dd:3c:33:0d:1f:db:ae:2c:dc:22:4c:f3:83:7f:8e:
3b:d0:5c:a8:f1:36:d8:93:c1:91:27:d1:96:5f:18:41:33:50:
da:f9:fb:8f:91:b6:51:72:ba:fb:77:39:2f:7a:91:27:6e:fa:
cf:85:60:2b:dd:e9:fc:73:58:bf:b3:bb:47:b0:fc:69:f1:bc:
ad:d9:15:aa:35:64:f3:d0:54:ff:a6:70:4f:3a:f9:23:af:6f:
8c:68:69:8a:a6:9a:30:c8:be:29:2f:b6:ed:20:ba:4e:96:fc:
da:79:ef:fd:47:64:00:f5:0b:ce:72:01:66:af:93:6a:15:61:
45:0b:a4:ce:e6:80:e3:b7:62:a7:a7:16:7a:83:d8:87:64:46:
e5:4c:96:1f:de:a3:87:3c:02:59:9e:00:88:99:d9:11:3f:a6:
96:41:c2:42:0d:f5:27:c1:67:e3:02:08:0e:e4:a8:ea:a6:c0:
6a:c0:af:4f:d9:8e:08:ab:0b:67:7e:6d:a4:8e:46:7c:c8:ec:
fd:27:21:73:7b:84:0e:97:c9:49:36:b1:cb:46:32:5c:09:8f:
19:99:cd:00:b7:61:9c:a8:42:f0:e6:f9:83:25:3f:36:0c:a6:
92:10:46:8b:4c:77:51:53:d0:62:05:87:a4:5f:be:b1:8c:59:
fa:6f:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:09 2025 by rpki-client