Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641b3579-7492-361b-bd49-fece24383a9f.roa
File: 641b3579-7492-361b-bd49-fece24383a9f.roa (raw, json)
Hash identifier: IPRocAUy+Cxq4EahrC2XnvZBgHBJ6WrwKJW6XC4NXJs=
Subject key identifier: 81:EE:D2:E4:BA:0E:06:46:D6:81:09:A9:B8:D1:48:F2:B9:E4:63:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DFBCD5F57AD1346DAC900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641b3579-7492-361b-bd49-fece24383a9f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 70.89.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:fb:cd:5f:57:ad:13:46:da:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2ed58e1e-c130-48aa-8309-2b9b6701aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:1f:3b:39:14:ea:38:b5:e4:8d:13:17:33:
74:ed:f8:ac:2f:a6:7b:ce:df:7b:03:68:6a:d3:44:
2c:18:49:a0:7e:8b:47:bd:ea:19:d4:d2:5c:17:73:
ce:96:d6:0a:7d:12:6d:4a:90:98:1e:0c:2c:6b:0c:
68:b0:aa:f5:f4:e7:ef:b2:eb:88:ab:cd:f1:46:ba:
5e:2c:dc:f1:16:74:a9:4f:6a:81:b6:22:63:77:0a:
0b:ba:f2:ad:84:c1:03:a4:65:00:94:7c:e9:75:91:
82:fe:e9:52:7c:e0:11:32:02:3b:72:bc:c8:0c:43:
84:3e:b0:ce:16:2b:5d:34:71:26:85:a5:51:eb:7c:
89:b8:dc:c7:8d:be:87:08:45:71:ec:a8:60:b9:ab:
e6:65:1d:9d:ac:1a:dd:34:ed:ee:15:9a:ab:41:6b:
c9:99:84:ad:e2:02:b2:3f:27:ea:87:f0:3c:4a:2d:
b4:46:e1:1a:11:af:98:12:0c:26:44:07:36:86:73:
4e:74:14:f2:64:da:ca:8f:37:19:07:c4:6f:14:43:
b4:e2:f7:31:d2:48:73:a2:4f:d2:60:e1:dc:1b:5d:
0b:81:53:85:7a:63:7c:03:45:fe:18:d9:41:30:27:
83:06:f0:37:81:3c:2b:81:57:d9:50:4d:ae:ee:db:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:D2:E4:BA:0E:06:46:D6:81:09:A9:B8:D1:48:F2:B9:E4:63:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641b3579-7492-361b-bd49-fece24383a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.89.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:66:4f:10:90:51:71:8e:63:af:71:91:a6:19:c8:f5:43:14:
15:80:70:7f:e4:57:1c:b8:9e:6b:b1:e8:5b:2d:0e:c3:37:41:
13:f1:1a:d2:ec:1a:9d:e4:07:42:51:41:c3:05:42:05:19:c2:
f6:10:2d:18:15:59:23:f0:72:4f:4f:82:1a:fa:29:bf:51:91:
0c:21:e0:8c:10:44:ad:7f:b8:47:28:32:63:1c:c6:0d:3d:c8:
e2:49:66:52:86:2f:0a:97:05:e3:d9:7b:a8:86:d5:4f:3c:7c:
4b:ee:01:6e:07:04:48:6f:65:d8:67:0f:b8:b8:9c:4d:69:ba:
70:2a:c1:1e:4c:74:c0:47:2c:a6:08:87:78:ac:8a:e9:5f:41:
7a:92:91:1e:70:09:f4:8b:b6:24:7e:12:33:08:a9:f1:bf:ee:
56:2e:d1:a4:ba:ba:48:83:99:b9:5a:d7:65:e8:4f:41:d6:1b:
6a:59:e8:c1:ad:02:27:cc:a8:2f:b7:92:4b:b8:e7:93:8b:aa:
ad:b5:1f:04:a7:25:82:8b:6a:60:d8:b9:6a:ff:5f:52:ec:c2:
46:c9:43:68:22:e8:dc:bb:9f:9a:c3:6d:b4:7f:86:1e:20:97:
f0:d3:b3:71:d4:ca:ba:6d:0f:3a:c7:14:b3:49:f2:bc:d3:63:
9e:08:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:04:19 2025 by rpki-client