Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a22add8-f41a-35ba-a911-88baad0461cc.roa
File: 4a22add8-f41a-35ba-a911-88baad0461cc.roa (raw, json)
Hash identifier: XLj93O3MbD1S1Y5LpILwwsLZgtfimpfzrf3MQvLxr4w=
Subject key identifier: 60:BF:6E:35:33:C3:19:4D:76:AF:5D:79:1F:AE:0C:41:98:8F:60:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DFAF6B19D27862F12AD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a22add8-f41a-35ba-a911-88baad0461cc.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 69.241.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:fa:f6:b1:9d:27:86:2f:12:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a9d0d940-c999-473c-95f9-2895f5ab804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:f3:3b:6e:30:46:16:3e:d1:27:34:a1:dc:
39:c0:87:e8:cf:6a:cd:61:25:78:f5:17:51:77:6b:
41:07:02:2b:c7:54:5b:9c:71:51:7d:e7:b7:88:82:
c8:24:be:c1:fa:df:3f:89:4d:a4:b3:1d:be:1e:b0:
b8:bb:0a:ad:6e:9a:69:10:3d:86:aa:c6:6c:f8:7d:
d2:58:ac:af:ee:e6:71:2c:dc:de:c9:9a:e0:9b:2b:
f9:38:60:90:63:ce:a5:99:73:63:a3:52:05:89:11:
b6:9f:a3:88:be:03:e9:8f:80:14:3d:55:fb:17:cf:
f5:c3:1b:a7:74:71:7c:29:eb:cf:c6:e8:08:da:0d:
f1:67:31:d4:b2:8f:49:a6:6a:ca:0a:5e:d4:d7:45:
0e:8c:f8:9e:6d:e8:41:5f:f8:8a:19:ca:9e:69:c3:
04:af:c1:c9:c7:5e:79:15:ae:89:ed:a9:35:1b:bb:
6e:31:f2:5a:2f:cf:ac:bb:eb:8b:bf:f9:e8:16:c9:
85:cf:16:96:00:67:60:32:a7:ec:4e:3f:19:9c:04:
04:97:5a:35:d6:35:26:13:7a:4a:d6:dc:12:42:75:
b0:f6:1e:44:37:ba:11:a5:01:80:f1:72:c6:e2:a4:
1a:6b:ef:a3:e3:45:16:23:02:82:94:91:dd:47:62:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:6E:35:33:C3:19:4D:76:AF:5D:79:1F:AE:0C:41:98:8F:60:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a22add8-f41a-35ba-a911-88baad0461cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.241.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:ed:d7:10:5a:b9:ef:84:03:28:50:92:6c:55:57:1b:fd:54:
d3:a5:7f:d3:51:54:06:ba:f8:05:50:4d:10:80:ee:d4:cf:fb:
b7:7b:ac:2e:b9:d8:1f:b7:b6:4e:2a:c7:ec:9b:93:f7:13:3e:
4d:af:de:0a:e0:dc:03:03:c3:b4:6f:d0:d8:a7:c2:6d:73:62:
d8:8b:33:21:f7:a8:f0:17:c7:f7:a5:9a:06:7e:c3:8a:e5:2b:
26:0e:9a:8f:83:96:dc:a7:e5:32:1e:46:7c:20:ea:27:a3:80:
9e:26:67:1a:69:94:ad:1d:85:e6:86:8c:54:af:c1:fd:fc:16:
d1:99:1d:fb:73:e7:c5:bf:c6:4b:59:7b:e3:2b:53:a0:d0:a2:
23:ee:6f:93:dd:3e:e8:2d:34:9b:0b:49:6a:66:25:62:83:b4:
41:97:16:12:5c:e4:ec:ca:bc:cc:b9:08:e9:88:00:22:d9:e2:
94:a1:ea:49:3e:c3:72:92:58:72:5f:ad:35:b7:65:a5:af:89:
20:1d:3c:a8:f7:8d:2f:c2:14:a5:32:57:6d:2e:7d:88:30:6c:
d9:9d:70:fe:c9:6a:72:f0:f9:8c:76:99:f1:fe:1e:a9:4a:8d:
2e:3b:4d:e9:1c:bf:dd:0b:4b:16:76:76:bd:1d:41:e7:2f:8d:
cf:a4:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:47 2025 by rpki-client