Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/419c456b-a529-312c-abca-2e9526ddfe5d.roa
File: 419c456b-a529-312c-abca-2e9526ddfe5d.roa (raw, json)
Hash identifier: CWJXzcvI0Rxi5OQ6ciHBwbeh75jxZk6MaT8d7TIFBKE=
Subject key identifier: 81:E7:30:7A:EB:01:DC:DB:FF:BC:66:6F:B4:8E:65:64:D9:02:C5:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6D7767A091A36BCC3900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/419c456b-a529-312c-abca-2e9526ddfe5d.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7015
IP address blocks: 66.31.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:6d:77:67:a0:91:a3:6b:cc:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=fa6116b4-358a-475f-91aa-6b43478c420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:a6:1a:44:48:3f:ff:25:5d:64:aa:dd:f3:
c5:79:d1:52:78:e4:e6:8e:40:08:dc:9e:d2:12:37:
ef:ed:cb:5c:1b:e7:9b:96:77:0d:18:c1:1d:6d:9b:
8f:53:77:ce:16:f9:eb:9e:a8:ea:1f:58:24:10:4c:
e8:33:d3:72:91:f8:bb:7c:f5:2e:f0:fd:73:04:b7:
b9:de:52:bd:4e:8e:2f:84:78:be:28:00:21:ff:41:
dd:a7:04:9e:4a:0a:3b:4e:63:0f:1f:ca:df:1a:e6:
79:11:59:e0:1e:cb:2c:a7:4c:40:e9:97:3f:8b:90:
59:6d:78:ce:9a:54:31:00:cd:13:e7:7a:e4:b8:c6:
19:5f:87:87:d9:31:5c:08:ce:34:60:46:bc:43:18:
d2:ea:9c:94:3e:9b:d4:48:af:df:1d:95:f6:bd:eb:
45:05:06:cb:ff:dc:3a:ac:84:cf:9e:ac:94:a5:00:
f2:3e:45:7e:32:81:86:45:ea:36:77:23:ce:f3:8d:
15:90:89:6d:d8:f6:83:55:b3:7e:55:58:90:a1:36:
08:b8:22:6d:36:b7:42:e2:ec:60:a4:8c:92:ed:72:
ec:3c:4f:b5:43:1e:01:93:ae:98:fa:ca:5c:01:ca:
41:d3:89:cd:30:d3:ca:48:c5:f0:40:35:33:96:00:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E7:30:7A:EB:01:DC:DB:FF:BC:66:6F:B4:8E:65:64:D9:02:C5:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/419c456b-a529-312c-abca-2e9526ddfe5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.31.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:c9:fb:91:06:ce:3e:87:c5:10:5f:06:e6:16:26:a3:b7:61:
fb:61:93:40:e0:6f:6b:b0:ff:b9:aa:cc:b9:e8:34:18:f4:12:
c4:e7:0f:c8:53:16:47:e5:83:c2:e2:ec:05:e2:42:ae:e8:df:
72:da:b0:dd:64:af:b9:ae:bb:34:2c:7c:b1:87:69:46:f0:a0:
d4:35:96:96:f6:ff:63:d8:ba:b7:4d:35:a6:68:f1:65:32:ea:
c9:5b:25:01:1c:23:f0:17:14:43:d0:0d:c3:4f:5b:60:11:86:
30:14:67:c7:41:00:23:14:73:7c:10:0f:2c:4c:7b:de:59:dc:
c4:a0:05:4c:08:30:33:1c:ca:21:8b:95:6f:f7:ba:b0:eb:8a:
e2:d8:64:b5:07:e5:84:53:58:02:e7:06:5f:02:48:19:f7:fd:
b9:29:9d:55:c7:df:a7:2c:ee:4d:99:f6:e1:f7:af:67:a6:5c:
a5:b7:f0:47:89:5a:ab:0d:c8:c6:c9:a3:06:59:b6:ce:2c:ef:
08:84:1b:6a:f3:d9:67:50:4a:18:e3:70:47:03:bf:13:e7:62:
ec:28:1d:7b:c3:e8:46:e6:09:24:af:03:14:3c:84:80:25:17:
38:1c:ac:43:a3:23:61:94:68:62:99:66:19:b8:53:58:ae:1e:
95:84:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:40 2025 by rpki-client