Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0faff7-b691-36d5-8a83-2147f333171e.roa
File: 4d0faff7-b691-36d5-8a83-2147f333171e.roa (raw, json)
Hash identifier: CWF0us1fKREh6CBJ6HGZVRbGXol0oDi+93BN117xP18=
Subject key identifier: D5:25:F7:67:46:37:FD:0B:2D:07:17:F6:49:96:29:D5:80:45:AC:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BC899F86ADF2DE8473940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0faff7-b691-36d5-8a83-2147f333171e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 96.113.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:c8:99:f8:6a:df:2d:e8:47:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8f7f4750-ee7f-4d89-93dc-10c670a98afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:4b:a0:40:b8:8e:09:30:0b:89:cc:a2:da:
4d:d5:84:da:6f:e0:eb:c2:01:26:b6:f5:c0:fa:18:
57:71:bb:1c:f2:27:f8:5c:e0:45:52:4d:ef:3d:cb:
41:34:86:83:37:0c:73:f8:e0:db:48:20:ac:ee:8d:
df:0f:46:66:aa:5d:7b:6b:2b:7e:e5:ba:9d:d1:8c:
a1:61:37:5d:a5:74:21:49:a7:a5:6b:9e:37:b6:ba:
27:74:8b:9c:a6:a0:0f:96:27:d5:43:51:11:f5:30:
c3:8c:26:ac:98:9e:30:12:99:bf:1a:62:05:a0:85:
06:c2:65:ed:28:86:2c:aa:e0:ec:cf:c8:0e:65:03:
43:c1:05:3b:17:58:94:fb:e3:ea:71:ac:47:36:c3:
fe:18:75:5e:2f:c4:a1:31:31:6b:51:fa:e3:c0:76:
e0:5a:22:7e:12:cb:6f:de:aa:2e:d9:0b:38:26:4c:
6c:68:76:bf:76:eb:5a:60:cb:9b:2f:5f:9f:07:9d:
d9:e6:19:6b:c0:98:e1:94:6d:3e:2d:9a:aa:44:4e:
49:9c:7d:7d:34:a5:f9:97:06:c4:22:01:b6:c0:0c:
4f:7b:a3:30:63:e0:1d:d1:00:90:ae:57:a3:26:bf:
c4:db:de:c2:d9:02:5a:0e:9c:5a:44:c7:49:81:98:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:F7:67:46:37:FD:0B:2D:07:17:F6:49:96:29:D5:80:45:AC:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0faff7-b691-36d5-8a83-2147f333171e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.113.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fd:06:e2:de:6f:72:62:75:01:d1:df:74:70:7d:0a:52:5c:
16:90:ca:7b:8d:ec:c9:c8:d1:45:57:69:27:1e:77:33:ad:61:
75:62:18:ca:0d:7b:2c:3c:28:f3:dd:05:a3:40:3c:66:5f:ec:
de:61:2b:6f:b1:dc:c8:08:34:ac:20:7b:19:38:35:87:98:71:
57:37:85:8f:59:4d:5d:0d:fb:d2:98:4c:dd:55:02:c7:a5:f1:
f3:39:e2:33:05:ec:70:56:b4:4f:4a:68:dc:8f:ab:6a:bf:1e:
8b:c2:04:69:5f:ed:be:1c:6f:bf:94:85:6c:61:34:8f:82:c0:
93:cf:28:6c:2e:23:37:b0:d8:ce:26:65:13:49:23:0d:39:3d:
5d:be:9f:39:b3:f2:e1:22:86:52:b3:ea:9c:a5:3c:0c:e3:27:
a2:6b:97:8c:3d:60:19:44:10:6c:d6:64:1f:b2:54:4b:f6:27:
23:0a:0e:4d:f1:50:06:d7:ba:7c:d2:db:a9:60:f6:78:ad:91:
35:1a:dc:94:5f:e4:ba:a3:c8:2e:a2:71:de:5a:8c:84:fb:3a:
94:c3:bd:64:5a:d4:94:9f:4d:01:fb:ab:55:4c:19:a6:5d:c9:
b6:53:f9:09:d1:88:43:52:3b:5d:a6:c8:a7:29:b6:e6:f3:32:
a4:ca:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:30 2025 by rpki-client