Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a80b2e54-cb11-3dc4-8435-cee31e470908.roa
File: a80b2e54-cb11-3dc4-8435-cee31e470908.roa (raw, json)
Hash identifier: PZsXJZFTxYYi3F7TKSuNz+IOfX5ysAHm1WXXajy0zi0=
Subject key identifier: DE:65:90:5E:C9:37:51:81:C9:58:8B:2E:7D:79:E4:0F:F7:56:10:73
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7D5D02B308E921E9D4B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a80b2e54-cb11-3dc4-8435-cee31e470908.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 174.170.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:d5:d0:2b:30:8e:92:1e:9d:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b56c19b2-636b-41d9-8f86-378dcb9f360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d1:02:b3:14:bf:1c:2f:df:0c:b6:5a:16:3d:
6a:af:b7:4e:02:09:ea:71:75:5f:ea:f4:97:d1:3c:
33:1f:68:65:2a:c5:ab:9b:b7:06:be:a4:ed:2a:97:
b5:0b:6f:fb:34:47:c7:93:79:af:44:be:56:6b:4a:
bc:c2:a8:c3:31:d9:ea:8e:66:0f:58:13:5f:60:4d:
75:24:b8:62:3b:7a:1c:b1:2c:3d:af:ac:ec:ef:a5:
1d:3c:a3:dd:74:23:67:e8:dc:e5:3c:ad:46:13:03:
9c:3d:51:e0:2b:92:84:d1:5b:95:44:f6:05:17:c6:
5f:2f:92:0d:16:b3:9f:37:64:ea:2a:89:ae:9d:8d:
25:93:f7:77:87:88:f5:7f:1b:9d:b7:3a:0b:f7:98:
b3:aa:05:08:38:9f:65:a1:f0:52:24:49:fc:bb:0a:
ed:a1:82:fe:ce:2d:ca:9b:86:be:37:c3:f5:11:c7:
23:6d:cc:22:69:4c:a0:7e:90:e5:92:f0:57:e7:f2:
bb:d7:74:1f:ff:95:22:b7:47:45:91:f6:1a:03:2a:
b6:ed:e1:ac:19:2b:09:03:e3:0c:3a:47:5b:8e:fa:
f8:7f:8e:c1:c6:e6:3d:ed:22:32:de:e5:ba:6e:16:
2a:c5:0c:41:a9:5e:f1:42:5e:33:7a:0a:c5:03:b7:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:90:5E:C9:37:51:81:C9:58:8B:2E:7D:79:E4:0F:F7:56:10:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a80b2e54-cb11-3dc4-8435-cee31e470908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:9e:5f:82:bf:f4:7d:fc:ef:f4:4f:93:76:7d:4c:49:07:cd:
d7:de:f1:67:6d:67:ce:e6:b3:ac:40:1c:66:f0:f4:b5:89:34:
b6:78:4c:27:30:0b:99:ed:da:91:f0:4c:84:06:e0:d4:da:22:
0f:3e:03:0a:4e:25:d3:ef:7b:fb:67:68:9f:b9:b8:35:43:d5:
07:6d:f6:fd:75:9c:79:fc:b3:33:eb:f6:67:80:09:0f:56:48:
97:89:51:95:2b:05:86:37:ce:2a:ea:4a:92:5e:46:95:d9:8d:
d0:c1:72:08:09:bd:fe:6b:28:5e:c3:cf:15:c4:ed:3a:56:14:
dd:0d:ee:8f:6e:47:8f:0e:14:99:f4:35:49:39:3e:f4:e0:2a:
1f:38:6b:b4:d4:36:ee:b6:28:5d:fa:bd:cf:db:b6:dc:f2:7f:
79:60:7c:e6:a4:a6:9f:98:c3:fd:d8:e0:d3:c5:72:fc:3e:75:
3f:04:69:16:c0:83:31:d6:e3:78:ec:94:99:47:f7:cc:9b:49:
10:e8:94:24:4d:41:a3:3c:3f:bb:ea:ca:a0:c6:26:1c:25:18:
eb:0b:d4:94:3f:dd:c3:19:2a:bc:0e:97:1a:2a:e0:b9:82:ef:
49:60:38:f8:2e:70:c8:74:8d:aa:39:18:7e:5a:41:67:ab:a3:
76:b4:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:14:08 2025 by rpki-client