Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84a88a44-0089-3314-ba8a-d835df2cf9a4.roa
File: 84a88a44-0089-3314-ba8a-d835df2cf9a4.roa (raw, json)
Hash identifier: tiTwBjTDBP2HrjJzGJiHoe15qVX5kc+qgPzzJTtJu4U=
Subject key identifier: CA:32:86:F1:9E:BF:BD:91:A3:D9:BF:3B:0D:0E:B7:89:24:A6:89:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B871782C8152B3A3EF698
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84a88a44-0089-3314-ba8a-d835df2cf9a4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 69.245.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:87:17:82:c8:15:2b:3a:3e:f6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7e3ffb63-3c81-4b0e-b9e6-2f48744d40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:bd:a4:a1:cb:5b:08:ba:60:80:50:39:2f:
74:b9:18:14:d0:bd:2c:0f:ff:b7:27:85:c5:db:2f:
72:25:a9:22:7b:89:ba:70:f3:b8:48:22:ae:f2:51:
b1:4c:36:39:da:c8:7e:69:5f:fc:4b:fa:d1:43:22:
1c:62:03:dd:9b:8e:6c:2a:15:2e:00:f6:36:7e:36:
3a:e7:e9:c4:6a:95:4b:5d:3e:6d:53:5d:dd:f6:00:
8b:43:bc:2c:e5:09:72:8a:bb:4d:e2:dd:0e:b9:ae:
20:81:a2:28:e0:00:ab:21:a0:bb:7e:73:80:3f:91:
d4:40:29:60:e1:8a:d7:d6:56:69:11:a8:22:64:7d:
89:d1:91:10:d3:e4:f0:c5:73:9e:9e:ea:6d:32:2c:
18:56:77:ab:38:33:b9:f0:ed:cd:ac:82:18:6f:e7:
19:1d:8b:9e:cf:fb:41:83:94:83:62:ac:06:99:79:
2d:82:41:d1:29:aa:10:53:72:a4:35:56:da:a4:2c:
91:d3:54:06:1b:16:5c:05:63:a9:8e:50:fc:53:12:
44:37:63:53:70:17:ee:92:20:bd:5d:12:d3:cc:30:
35:1b:e6:80:41:ed:ba:50:24:90:2d:46:29:58:d1:
36:70:67:cd:cf:00:2c:dc:60:6d:23:11:8c:10:9e:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:86:F1:9E:BF:BD:91:A3:D9:BF:3B:0D:0E:B7:89:24:A6:89:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84a88a44-0089-3314-ba8a-d835df2cf9a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.245.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:70:ff:e0:1c:69:1a:b0:20:61:73:53:83:24:5a:5c:46:b7:
12:38:66:ff:85:74:7d:2f:18:e5:25:e8:42:d6:71:8b:45:c2:
42:3a:38:7f:ea:f4:47:ee:be:3c:1a:28:e4:f3:56:e4:12:21:
bd:91:dc:47:f8:ef:c9:42:22:5f:1e:2d:2e:ad:c8:23:76:22:
df:ef:12:8d:9e:87:ec:c4:84:3e:4f:71:67:c3:0a:c4:ff:f9:
86:70:c7:d3:17:c4:3c:08:32:67:bc:4f:32:79:a6:8a:cd:5a:
3d:ff:a6:e3:21:96:76:3b:62:02:a2:ca:22:8a:0b:5b:3a:b1:
5c:b7:79:fd:87:3b:95:d4:ff:f5:24:02:f6:cf:86:7b:94:57:
2f:1b:9d:d0:0f:05:f6:be:f2:aa:f6:ea:82:f7:78:50:38:0d:
d6:9f:24:6d:b7:25:96:ab:e4:49:97:6f:6b:14:41:9a:64:e6:
94:b9:51:c2:73:96:d7:c0:f5:d8:37:2a:57:45:e8:ba:eb:31:
5e:fa:29:5a:1f:34:a8:71:a2:be:c4:ff:2d:c1:99:be:f2:50:
59:dc:4f:14:7b:3d:07:21:4d:8d:42:ae:6f:ec:50:3f:bd:2d:
8b:38:05:ae:f3:c5:50:6f:e4:28:b7:16:bb:9f:ac:76:f3:47:
d6:ed:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:33:40 2025 by rpki-client