Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c357598a-e8e2-3381-bbc4-47ea024da3f4.roa
File: c357598a-e8e2-3381-bbc4-47ea024da3f4.roa (raw, json)
Hash identifier: pXEfWghOvuknK34lFzAefbhKm8MjZ3j1odC3N3Rnnps=
Subject key identifier: 1C:3F:59:2E:B9:44:42:EC:BA:2F:2B:C4:F0:E6:BE:AD:C3:F7:09:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DA2E05BB83F7C9BE2EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c357598a-e8e2-3381-bbc4-47ea024da3f4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 96.96.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:a2:e0:5b:b8:3f:7c:9b:e2:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=217189eb-b583-4d06-8221-5547506622c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:4d:37:f1:84:41:02:a0:da:5d:f8:a6:5b:
8e:64:09:09:1c:b0:d0:62:cd:36:c7:23:22:8c:8d:
9d:36:39:fd:c7:a8:5d:98:74:e9:ab:72:d0:0f:8f:
e5:d6:a6:51:ea:9e:cf:48:e2:ad:2d:20:ef:90:13:
45:2d:7e:aa:35:ce:df:ad:11:33:e3:88:f0:39:62:
11:de:68:e6:ea:d9:cb:53:a4:a6:97:93:4d:99:2a:
a8:b4:6d:03:5f:a2:dd:e9:91:e2:8d:30:bd:25:49:
d3:0f:2e:0d:14:b2:f2:95:cb:49:ef:2d:d6:2d:a6:
b7:3e:53:33:fa:8e:a2:3f:f6:54:fa:de:b0:fd:c8:
69:df:29:82:b6:f2:88:83:28:4f:ab:1e:4f:d8:67:
fc:2b:98:9e:83:2f:72:2f:8a:03:53:db:e2:f8:1f:
5d:ed:8e:34:29:8d:c6:2a:8e:a3:13:dd:29:c2:6f:
a3:be:65:33:e2:ba:c5:1e:7c:b6:f9:da:86:8e:6e:
d5:82:18:57:c8:2d:17:a2:2b:fa:94:f6:dc:27:23:
44:c8:37:82:66:52:78:05:21:ca:3d:78:bc:bd:7b:
da:b0:5d:ea:69:fe:ae:ec:22:b5:06:a5:14:b7:30:
05:5e:d5:c1:56:59:73:f6:41:f5:1d:02:cf:5c:b9:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:59:2E:B9:44:42:EC:BA:2F:2B:C4:F0:E6:BE:AD:C3:F7:09:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c357598a-e8e2-3381-bbc4-47ea024da3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.96.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:ff:e0:9d:73:61:b2:0a:d2:cd:9c:91:97:df:e1:73:1b:41:
5f:55:1b:df:d5:be:13:41:4f:f7:99:2d:f7:69:3b:a8:61:58:
24:27:df:0f:46:d8:37:bf:73:20:f6:d0:39:d7:ad:07:9e:61:
41:7a:63:8d:75:66:9e:f5:b2:2b:15:2a:94:3f:47:c2:8c:95:
25:b7:99:1e:c5:53:d4:a1:2f:b5:e4:4f:00:28:f0:27:c8:da:
f2:fa:fc:80:b4:45:61:0b:1e:27:ad:06:24:93:cf:3d:73:79:
2c:fe:30:a9:12:a2:7d:b0:c6:09:bd:4a:85:3f:db:67:2b:23:
98:71:ed:f3:b2:43:13:1b:8d:3a:29:39:98:5b:0b:4d:ca:ae:
84:e1:6b:5b:2e:ad:6c:34:5a:c5:50:72:4b:5b:f4:25:2c:95:
99:3d:92:80:bf:79:4f:3d:e7:ad:b6:07:2b:40:13:58:84:f4:
85:c1:12:68:70:a3:de:58:da:f3:2f:3c:20:be:34:ab:9f:95:
6b:6a:c9:8e:27:8b:56:80:5c:57:7a:66:d0:4c:a0:d7:09:ed:
29:0b:a7:f7:62:e5:5e:5c:72:b3:1f:82:15:d8:7e:02:a4:8f:
18:8d:29:a5:20:5e:e6:d4:9a:5f:6e:92:da:9c:fb:e9:ba:1f:
08:8c:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:19 2025 by rpki-client