Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2b0e61-0429-33d1-bbad-043b2a84f491.roa
File: bd2b0e61-0429-33d1-bbad-043b2a84f491.roa (raw, json)
Hash identifier: oAD4e+CRthKS+q6EtBG5CZf+zg7QuwSKaXapu0eLSF8=
Subject key identifier: 4E:E5:F1:BF:23:1B:4D:5C:D3:FF:47:FB:6F:2E:EE:46:B7:FD:44:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70F7E3E33FDA2682F0500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2b0e61-0429-33d1-bbad-043b2a84f491.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.235.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0f:7e:3e:33:fd:a2:68:2f:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=9fcc3370-c95a-4dec-86e4-25cbfe3a1d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:58:25:c8:ee:5b:93:c3:d1:dc:b4:54:44:
e5:77:3b:1c:10:f8:9b:09:4f:ae:52:d8:05:25:cc:
48:b9:76:3b:b3:95:98:16:23:03:ad:5c:71:42:a8:
17:36:1f:c7:5d:d6:20:69:fc:71:75:18:58:d1:8c:
a4:bb:fb:1e:e3:3e:7c:f6:4b:69:2c:5c:09:6f:b2:
99:91:3d:1c:79:5c:ba:1c:5f:ce:fc:dc:39:6a:62:
63:a2:00:33:1a:2a:af:4d:fb:5b:ec:fd:06:19:09:
fd:6f:b5:65:bf:83:15:8c:cd:8a:cc:d9:4a:a3:b9:
c9:6d:98:d8:5f:1d:ca:2d:39:eb:24:ae:73:47:ce:
29:22:f9:51:83:ca:f3:87:b2:f4:ff:fd:dc:6a:ba:
15:6c:16:40:86:db:3a:31:61:44:79:b0:a0:e3:9a:
94:ba:ae:ea:1e:3d:d9:94:aa:ee:c6:cf:30:59:62:
88:ad:bc:92:f7:bc:d0:70:e8:82:5d:55:19:f7:fe:
95:af:02:aa:18:52:99:57:9d:a0:0b:02:d9:33:d8:
1c:b3:0f:88:0e:e8:31:79:e8:9e:ba:ca:b1:f1:ce:
04:c0:af:c5:d4:56:d1:92:6e:06:93:f4:d5:26:fa:
34:29:0c:d8:8a:d9:fd:57:85:f9:5e:c9:2b:e1:81:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:F1:BF:23:1B:4D:5C:D3:FF:47:FB:6F:2E:EE:46:B7:FD:44:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2b0e61-0429-33d1-bbad-043b2a84f491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.235.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:33:62:9d:47:0b:11:36:bd:23:85:52:8c:72:9d:d7:61:dd:
a3:cb:3f:a4:ed:e6:33:28:c6:5c:86:44:cc:05:36:60:7a:5f:
49:9a:88:88:91:0e:37:5f:c2:d0:89:d7:ef:bf:81:28:50:8b:
f0:5d:70:8b:c8:74:b7:b7:e1:07:96:b2:81:b1:a0:94:24:33:
74:cb:9f:3d:61:cc:b0:68:98:f1:48:28:92:36:d7:2f:32:c5:
86:d6:b4:b2:b8:dd:67:4f:e0:53:0e:cb:2e:b8:c9:34:6b:1f:
47:b7:2e:07:f1:95:9a:d9:fe:80:80:d8:5d:f1:75:16:71:87:
17:23:d8:a0:c7:5a:c5:83:32:5d:e3:86:38:a7:45:e6:81:53:
b2:0a:99:f5:8d:ac:4d:30:3d:3c:e1:34:25:2a:d8:96:8a:fe:
29:31:ab:38:d5:ad:7b:b5:78:6c:af:d5:81:bd:14:fe:46:46:
92:7a:a9:2a:1b:f1:8d:c6:82:35:fd:d3:e9:9e:1a:fa:0b:67:
27:f2:1d:96:a7:af:89:b1:11:d6:58:41:87:ec:3b:5e:dc:b5:
22:6a:f4:f8:ec:a2:cd:e2:27:8f:19:d8:34:a8:6a:99:89:91:
53:76:96:f8:30:1b:a6:9a:13:b6:b7:25:2d:91:8d:5a:35:9c:
04:c3:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:39 2025 by rpki-client