Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d4495-4adf-3031-9729-0d212d17dde1.roa
File: be5d4495-4adf-3031-9729-0d212d17dde1.roa (raw, json)
Hash identifier: ecl7bP3Z+BcLF9sRPGM3i3+fJX7TjJKvtHb5jJD5PGk=
Subject key identifier: D1:0D:AA:D5:C1:E8:DA:E5:06:B0:22:D6:FF:E5:86:AC:8E:EE:05:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD451F72A1C1A44541080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d4495-4adf-3031-9729-0d212d17dde1.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 173.162.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d4:51:f7:2a:1c:1a:44:54:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=428dd609-3f8b-48db-80d4-b0bc2dd3c710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:99:f2:5b:7c:f9:bb:41:67:5a:45:ce:3a:
e6:10:b4:d1:5d:6d:10:d3:c5:d9:86:79:6b:fa:37:
c4:1f:d9:c7:c8:2f:8d:3b:9d:8e:d0:94:05:24:51:
42:64:eb:8c:36:3a:4b:d5:ad:67:27:ed:44:e6:05:
6b:4d:a9:0a:53:d9:c1:22:24:a0:51:66:68:98:48:
86:c2:db:48:de:14:87:57:34:b6:e5:80:a5:11:e7:
43:ed:e2:bc:21:a9:56:58:cf:52:d8:44:3a:54:9e:
86:3c:87:d1:73:0d:04:ab:43:f3:18:3b:2f:98:46:
a9:d1:cc:e0:3e:de:46:d5:77:b4:44:7e:2c:05:ea:
2b:f1:12:c8:67:ab:45:f0:46:bc:f5:fb:b0:86:40:
80:24:c2:9e:bd:ae:ee:c3:d7:6d:94:25:2e:c8:80:
ce:6f:4e:e5:6f:8e:ab:70:c8:af:d4:09:01:30:67:
85:48:82:95:17:97:e3:3b:4b:d0:9b:f8:04:e2:f1:
4e:46:cb:ac:84:25:f7:4b:b4:dd:e8:ec:97:8a:d2:
75:cd:20:07:bf:48:a3:96:7f:41:4b:cc:be:2e:f9:
23:ff:f4:3e:0c:51:6a:eb:01:ff:2a:30:e4:02:98:
04:37:e6:5c:71:35:6d:8b:39:56:e5:f6:6e:91:be:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0D:AA:D5:C1:E8:DA:E5:06:B0:22:D6:FF:E5:86:AC:8E:EE:05:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d4495-4adf-3031-9729-0d212d17dde1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
173.162.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e9:da:75:3d:74:6d:56:2d:fe:68:c3:78:88:c6:03:20:79:
23:8a:de:6c:71:ba:bd:e7:71:8f:f3:43:59:b9:93:95:5f:be:
eb:d5:ad:24:d0:3e:82:dd:e4:b4:aa:35:08:a8:1a:4d:d4:c5:
d8:45:e5:70:c2:fa:21:37:aa:a9:58:f8:7f:70:eb:a4:50:f5:
74:34:cc:b7:30:94:ad:b4:2b:35:02:ed:24:d2:08:68:97:d3:
ad:cc:d3:bb:8e:53:a0:73:fc:ba:89:3b:92:d8:64:b7:56:94:
d2:30:c1:d3:a4:c2:93:ab:f7:cd:be:74:89:95:50:65:49:0d:
c4:d4:0d:1d:ae:c5:9d:bd:d0:c3:a0:3a:b4:cd:8d:09:c8:8f:
ea:54:ca:43:25:eb:d6:31:45:28:2e:2a:b9:7f:6a:3b:b3:0b:
11:07:9e:82:12:99:4d:8f:a8:c7:22:40:80:9d:7f:a7:ea:b6:
72:b3:80:3b:c6:88:17:14:11:11:3d:bf:c8:c6:1a:15:b5:a2:
21:ee:9c:cc:e7:20:00:0a:58:01:a4:ba:52:de:3d:be:a2:01:
f7:46:79:34:03:9d:b5:f3:d5:44:97:77:39:92:09:87:75:8d:
b0:37:2a:dd:b2:96:a9:0a:56:fe:cd:0a:f4:67:36:d8:9e:db:
44:fc:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:11 2025 by rpki-client