Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa
File: 5aa89212-3d33-3052-97d6-991ea1d1130d.roa (raw, json)
Hash identifier: rHyfAnchRMMlxHRcuL2RgMt3LAbJsnFk8Cr1cBoE/vk=
Subject key identifier: 5A:90:D4:AB:61:22:B9:9D:25:E6:6C:3B:4B:96:1A:DE:0D:D6:71:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF2C7E3DF3E960F5EA08A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.1.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:2c:7e:3d:f3:e9:60:f5:ea:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=68c31431-3695-4b2b-b70c-e290e79744ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:36:18:60:3c:ba:11:72:c6:20:7e:96:36:
25:71:99:49:0c:55:71:0b:4e:9b:cb:f8:5d:e2:4f:
23:1c:87:f5:57:6e:73:c1:39:13:0c:88:3c:71:4c:
db:f5:63:3b:d5:3f:d0:d0:52:1d:a0:9f:64:91:7e:
da:42:7e:ef:51:ae:61:e2:74:d8:44:dc:4b:18:cf:
10:be:45:ea:67:31:4e:e6:5a:98:3d:b8:ac:ba:ee:
37:d3:a1:55:5b:7d:3b:55:9c:d1:07:df:06:8f:a1:
8b:f0:5b:cb:17:be:d1:ce:af:df:63:e6:18:a7:72:
f3:c8:b4:cb:4e:81:6b:43:d3:e8:26:14:89:3e:26:
9a:92:d3:ff:19:b0:c2:99:55:55:8f:34:99:d4:44:
61:0d:08:58:79:da:cc:cb:34:53:a8:b0:4e:45:09:
a9:53:6f:56:6c:39:d6:75:1c:9f:63:28:46:4d:d8:
0a:93:8f:62:d2:5e:e7:72:fc:87:a8:d0:b1:29:78:
f6:2b:05:85:23:22:d0:0d:12:99:b7:2d:49:43:c3:
a9:fa:3e:7e:1f:84:e4:0c:9c:fc:d6:04:78:82:fe:
c4:d7:65:ee:5f:a7:df:70:36:4a:8a:1f:b3:81:56:
c4:fd:1a:84:81:3d:a2:9c:91:cb:ff:3f:0e:c0:e4:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:D4:AB:61:22:B9:9D:25:E6:6C:3B:4B:96:1A:DE:0D:D6:71:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa89212-3d33-3052-97d6-991ea1d1130d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4d:54:a8:54:b5:57:b2:63:79:99:24:01:f6:14:76:40:80:
84:55:97:19:68:24:6e:bd:3c:8e:1f:0a:ba:9a:74:59:45:9d:
71:3d:51:cf:bb:29:af:5e:a3:a1:98:b5:76:ec:86:46:37:df:
2b:c2:e4:eb:11:35:e3:19:bb:b1:a7:18:59:97:d1:e8:bf:f6:
91:f1:e2:98:bd:30:2e:e3:aa:09:bc:3f:41:7d:94:69:ef:2d:
48:b7:a3:56:67:95:39:55:a8:f3:b9:a4:40:ec:88:e0:df:17:
ee:8c:0e:92:24:4b:e5:78:0f:87:bd:c7:21:06:82:1b:e4:59:
84:08:0b:5e:b4:11:bf:2f:ee:ac:a4:64:f2:41:ce:04:55:00:
33:89:44:3b:b5:dd:5d:a9:9a:6a:90:ad:1e:3d:e3:44:cf:0a:
f6:1c:93:9a:d8:f4:35:2f:6f:4b:df:d3:20:3c:5c:12:25:51:
06:45:fa:66:da:35:72:97:22:70:9a:e6:df:c9:0f:4f:10:f7:
45:5e:42:3c:05:dc:0f:55:22:0f:47:c4:b4:95:6f:38:f8:1d:
f0:79:06:c2:37:d5:b4:c8:0d:ab:6e:5d:8b:ff:8d:e6:67:e6:
15:e2:7e:a5:31:df:a6:bd:d9:cc:d0:8e:fe:d7:41:ed:ef:ae:
65:19:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:01:49 2025 by rpki-client