Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa
File: 36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa (raw, json)
Hash identifier: EZhLQE0hQFJxEWdndE0QyTn1YXxj1UmdtXPKPiDdAP0=
Subject key identifier: D7:9E:9A:48:A8:5B:4F:65:2B:8C:37:11:EE:61:D0:65:41:A2:95:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6E55136745067D0994280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 174.168.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:e5:51:36:74:50:67:d0:99:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=be04d35e-cf01-4b99-8ec2-87b70771c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:c5:23:34:18:19:0d:e6:a7:08:28:f0:0f:
b1:6b:ab:43:ef:7f:c6:c8:1a:61:37:f3:88:68:19:
1d:96:6b:86:25:2d:ea:d7:4b:55:5f:d8:f8:79:a6:
55:d7:61:8c:8b:27:b8:7d:25:56:85:f5:97:2a:f5:
35:7e:41:14:6f:bc:5e:8d:a7:a2:b2:54:47:f5:9f:
c8:e4:78:55:8b:7e:f6:79:10:69:ac:66:6b:37:34:
ea:9f:d0:be:06:38:d5:3e:8b:5e:89:b9:03:2a:02:
28:02:83:29:5f:ee:25:6c:21:99:06:de:f0:ac:ab:
45:de:06:cc:0f:ba:8c:08:14:3a:f3:5e:be:6b:da:
3b:b3:8d:d6:37:8a:c6:15:29:9f:11:c5:e2:30:ac:
3e:74:60:1c:63:04:b5:70:30:cc:ff:91:b7:1d:d9:
1b:8b:43:1d:82:3c:d9:9a:b4:6b:5d:13:df:a3:1c:
12:d2:33:f0:1b:91:d4:f9:2b:6a:6d:27:c7:72:39:
1e:55:a9:5c:f3:0d:5e:d5:68:87:31:7c:6a:cb:33:
54:a6:06:a7:42:b8:93:86:74:f5:b1:dd:71:ef:c2:
eb:d4:60:26:00:24:59:36:ae:42:fb:59:47:22:1d:
37:18:77:a2:7b:0d:83:7d:5f:01:07:01:b2:63:2c:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:9A:48:A8:5B:4F:65:2B:8C:37:11:EE:61:D0:65:41:A2:95:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.168.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:27:0b:c6:14:a4:af:19:0a:0b:cf:0e:0e:29:cf:da:1a:dc:
2d:9a:51:9b:e1:49:c7:b7:cf:14:e7:f5:0a:26:ee:43:8d:e0:
29:cc:bd:e3:7b:3e:11:91:c7:85:0c:24:c9:d2:79:47:fc:26:
4d:5f:a2:fe:7e:19:39:0d:60:11:60:d1:01:7a:39:fa:37:01:
8d:db:8a:76:1a:cc:7c:6d:1e:50:4c:28:47:83:5f:a9:18:ee:
a9:ea:8f:81:dd:ca:29:f9:6b:d4:0b:7d:e1:8c:8a:7d:2e:c7:
77:1c:07:c9:d9:dd:1a:03:2e:7c:7f:92:fb:c8:d8:12:76:8d:
35:ae:b0:52:ea:cb:02:95:f6:03:d2:5a:51:36:e2:7a:1b:88:
1c:94:4a:60:19:99:c5:26:db:23:4b:5a:53:8a:96:49:df:f6:
76:1d:cd:6c:67:12:aa:a1:13:df:52:28:eb:37:fe:51:ca:c7:
25:01:36:cc:80:e5:b2:04:24:27:3d:95:31:5d:45:2b:c4:4a:
0e:e4:aa:7a:21:42:10:d6:2b:3e:76:81:c0:9a:a1:9c:a7:eb:
d2:59:e5:fe:73:10:4d:c7:60:28:19:77:56:b7:68:af:d1:e1:
c7:08:5d:04:aa:87:93:7d:81:bf:96:b6:72:0a:d4:4a:82:90:
7c:c0:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:50 2025 by rpki-client