Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5451fcba-9f6f-310a-a9fa-a35ad222647c.roa
File: 5451fcba-9f6f-310a-a9fa-a35ad222647c.roa (raw, json)
Hash identifier: 9PvcVmnFnPpxxcJ2eQe3JW6/ZXRHSYafNwudfb/qQ0k=
Subject key identifier: 2E:51:FA:0F:D3:CB:FB:EE:43:54:46:00:68:8C:9E:A1:53:01:FD:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D1C8D3E6E8734CDA167E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5451fcba-9f6f-310a-a9fa-a35ad222647c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 63483
IP address blocks: 50.238.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:1c:8d:3e:6e:87:34:cd:a1:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3958d478-e046-4b76-ada6-e13074681275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:52:9d:cc:a4:f1:21:b7:a1:98:9c:2a:38:
52:10:9a:29:78:2a:64:9a:ac:3a:84:24:e3:18:40:
f9:0b:38:a9:06:c9:54:5f:34:ec:37:53:7f:0d:5f:
51:dc:30:db:ad:ec:f9:c8:8c:55:05:87:b6:51:c3:
48:9c:72:2e:e5:de:fd:f2:c8:04:73:43:e0:9c:cc:
bb:dd:6b:9a:80:30:7e:7c:ea:2f:18:08:5b:2a:c7:
b7:2a:69:67:23:39:b0:2c:4d:75:c5:64:2c:9f:48:
6d:a2:34:df:af:95:46:d5:b4:3d:54:2d:15:9b:cd:
72:f2:d4:b4:dc:26:94:60:2e:ff:5f:38:b3:1f:2e:
4b:bc:4c:0e:9f:4e:8d:9e:10:26:f4:9c:74:55:1f:
d3:73:8b:9b:f8:95:3a:cd:13:46:08:4f:5d:c8:54:
b9:51:81:b9:12:59:1f:89:59:ee:b0:99:35:95:25:
40:46:8d:06:4f:c9:a1:c8:97:8d:5b:03:1e:7b:d7:
3a:ed:7d:70:09:28:0f:bc:d9:dc:68:78:df:d4:a1:
a6:91:59:0e:34:2d:5c:83:2f:96:f4:51:b9:7a:b5:
6c:00:54:25:06:9c:2a:b5:77:a3:3a:fa:69:db:12:
f0:ff:b4:42:e6:3f:72:60:19:20:78:42:52:24:45:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:FA:0F:D3:CB:FB:EE:43:54:46:00:68:8C:9E:A1:53:01:FD:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5451fcba-9f6f-310a-a9fa-a35ad222647c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.238.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a9:6c:78:c0:b1:72:fb:a4:a5:79:2d:b0:96:5b:21:d2:83:
46:10:44:3b:e8:4c:0f:11:4c:a4:6d:0e:b4:94:ef:7a:44:97:
84:2d:b8:1f:f5:3f:e6:a9:2b:90:c4:6d:ea:fb:50:cc:e9:52:
12:af:2b:de:3d:5e:27:d6:3e:fd:1b:67:b4:56:9a:bd:f8:11:
a3:ce:b1:4d:13:08:db:2c:b4:10:88:f9:17:79:0d:81:d6:88:
c1:15:c5:60:0c:59:71:b0:6c:a0:1b:47:3c:c4:ac:ad:86:57:
a1:78:8f:03:22:bc:8c:64:1d:26:e4:4b:5f:b6:0d:ba:8a:36:
cb:ba:9a:58:42:a6:2d:d4:bd:04:b7:62:25:e7:f2:01:c7:08:
34:b4:09:46:77:63:bd:22:f9:53:0e:c0:35:1e:04:a7:18:87:
e5:d1:56:39:03:d8:5e:c7:a8:8e:45:12:3d:5c:71:aa:6d:de:
6f:70:e1:d2:d4:62:d0:da:25:1a:66:7c:c7:3f:09:11:cb:a4:
42:50:51:57:63:63:65:3e:44:9d:22:3b:2a:c0:4f:1a:00:80:
c9:a8:77:40:3d:45:64:06:f7:c7:2c:5f:88:cc:6d:34:9e:3e:
88:62:92:eb:2a:41:6f:b0:17:7c:a1:79:dc:73:62:2a:a3:e3:
a7:c3:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:57 2025 by rpki-client