Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea33cbb-28aa-31fe-862e-b36eb9390ae8.roa
File: 5ea33cbb-28aa-31fe-862e-b36eb9390ae8.roa (raw, json)
Hash identifier: 7pr2Ds8Rp4Q+L9EUbkeUaMWbcpAcWwmWJGj+mj27sA8=
Subject key identifier: FD:8A:27:E0:55:88:4C:D6:5F:02:58:34:3C:30:D2:56:5E:5E:0C:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF247A6D69D10147537100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea33cbb-28aa-31fe-862e-b36eb9390ae8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 174.173.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:24:7a:6d:69:d1:01:47:53:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=4148c788-c027-476a-bf7f-2b3695169e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:3e:f5:40:a5:57:5a:99:e1:c2:01:c4:43:
a7:ff:e4:95:d5:c9:f4:17:53:c3:1d:7f:f1:c1:0e:
ce:ed:36:49:2f:48:5d:1e:f0:4f:2b:69:05:44:88:
3e:d8:7d:70:01:af:44:8f:05:ae:c4:6c:b7:38:b5:
b5:ce:44:35:33:cb:7d:ff:c2:5f:a5:bb:cd:d0:d3:
d9:f5:d4:a9:2e:e2:91:5f:f6:b0:30:67:a3:19:f3:
82:b1:6d:8c:60:48:38:d8:68:7f:63:90:45:fc:8a:
7f:06:76:ab:d7:d4:cc:04:f2:47:8e:6b:5a:a2:d2:
69:bc:8d:4b:e5:dc:58:85:4e:97:5a:02:17:ca:06:
e0:70:08:76:7e:76:b2:75:dc:9e:29:82:e4:00:13:
14:49:e6:69:a8:48:87:85:81:2b:df:61:ea:18:5c:
c1:ea:9a:2d:54:1d:50:ad:00:8e:b6:4c:d6:59:1a:
5f:8f:5d:7f:e1:04:db:e0:77:5f:71:57:a9:0e:2c:
6f:ef:d6:2b:a9:ba:ae:d4:c9:bc:61:96:ef:28:4e:
2d:c5:ce:59:3a:df:98:9e:9c:f6:19:4c:39:c8:1f:
73:81:ca:fb:53:f9:51:71:cf:93:99:1b:fc:83:cc:
85:7e:aa:fe:19:0c:75:3c:b8:f1:7d:76:69:00:f9:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:27:E0:55:88:4C:D6:5F:02:58:34:3C:30:D2:56:5E:5E:0C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea33cbb-28aa-31fe-862e-b36eb9390ae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:5c:65:0f:5b:d5:04:92:05:e4:65:09:44:c0:6d:10:f6:46:
9c:ad:44:52:74:61:f5:dd:5e:44:6d:ea:4c:5c:5e:b5:69:57:
62:62:29:8d:b0:02:d1:e2:58:5f:04:9e:74:39:13:30:3e:23:
d1:26:7e:7d:44:a9:8a:da:38:11:e3:4c:17:13:1b:4d:54:2a:
b1:7d:9a:86:12:d4:be:0e:fa:18:65:08:02:a2:a2:97:0a:cb:
95:49:71:b7:3e:12:45:24:55:5e:8a:b8:24:36:16:52:51:83:
bf:ad:34:45:2c:f7:e1:30:b1:e0:a8:45:7f:25:a2:c0:05:f5:
ba:da:b9:cb:13:61:1e:df:ae:c1:f5:b3:6c:bd:ee:27:0c:1c:
e4:26:c5:3f:55:56:0f:03:cd:73:42:c2:ef:9b:6d:5a:38:09:
87:64:5b:5f:c9:d7:05:67:3b:29:b9:3e:9d:fb:19:61:12:f9:
aa:b3:2c:83:5e:97:ee:79:64:91:59:a3:12:b5:16:0a:eb:88:
7f:9e:99:57:f2:d0:b6:be:59:1d:0a:6a:8f:8b:f3:2d:98:66:
f2:c7:a0:16:e8:ec:eb:14:ce:f5:02:39:dd:a5:62:63:70:08:
72:f4:b5:15:1e:c8:0e:72:4f:dc:4e:81:81:1d:ae:20:48:27:
9f:3c:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:23 2025 by rpki-client