Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d871771e-7762-3bbc-a2d5-e57b4534b120.roa
File: d871771e-7762-3bbc-a2d5-e57b4534b120.roa (raw, json)
Hash identifier: s1z1yfIUgDzpXtrEOcy/b0Tcy/FEcAcLcFSg082kxVc=
Subject key identifier: 51:4A:D7:D0:99:17:40:02:75:6E:7E:26:DC:53:D5:9C:E7:E0:BE:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C952F907AA72DF23458A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d871771e-7762-3bbc-a2d5-e57b4534b120.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 67.191.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:95:2f:90:7a:a7:2d:f2:34:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=7c82f4b3-2ec6-4495-8b14-6b12535e8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:dd:a8:65:dc:67:c3:9e:31:74:09:b3:10:
6f:09:ef:3b:20:f8:10:66:d6:a1:f4:f7:2f:f4:8f:
6c:a9:c8:57:5f:c3:63:0f:d9:82:41:c2:46:db:14:
20:67:16:b1:1a:df:e7:d1:e9:c8:48:0e:9c:d9:82:
88:2d:28:21:54:06:c5:8e:25:32:b4:3a:b8:b8:3a:
ea:2c:13:1a:05:e4:f6:8e:51:6b:77:f0:68:4a:80:
30:cc:22:c0:69:7f:8e:96:6f:37:c5:21:74:7c:f8:
f1:d5:d3:de:b5:77:f6:18:a9:5c:ce:23:e9:8b:ec:
49:17:23:89:ca:f9:46:b8:66:27:ec:58:fb:ed:3e:
db:3a:65:fb:10:4b:d0:1d:f1:56:01:3a:d2:02:53:
fc:32:9a:6f:ba:10:66:d7:86:09:6e:73:1b:2e:79:
86:15:4a:cf:76:11:b3:85:7d:21:70:1f:81:d0:40:
9e:ec:fb:d4:dd:17:03:89:e5:97:11:ed:7c:c6:e6:
ab:93:99:e3:2b:6b:bf:3e:44:2f:fd:be:56:70:16:
18:7f:2a:49:18:b1:66:5b:2e:f1:6a:3d:7d:b8:54:
ae:28:db:f8:b4:e8:aa:f7:f5:79:20:7b:8e:07:54:
9c:6b:97:29:82:46:62:5b:92:53:28:9b:e4:cd:3b:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:D7:D0:99:17:40:02:75:6E:7E:26:DC:53:D5:9C:E7:E0:BE:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d871771e-7762-3bbc-a2d5-e57b4534b120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.191.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d7:35:18:49:3c:95:23:ad:49:ec:32:2a:72:fc:1c:82:56:
f2:25:91:ba:6d:d3:b0:3b:f9:3b:5d:12:31:c7:3d:6f:4b:c2:
80:4f:2c:de:68:59:bc:24:b2:1b:76:b0:d1:21:c5:f7:86:bc:
21:73:58:14:22:03:0f:3c:97:9a:c0:e5:76:c5:00:d3:cc:8b:
ed:5a:cd:88:c1:98:bc:79:50:3e:55:89:4a:2d:45:75:bd:13:
f2:aa:1a:0d:ee:ec:1e:54:f9:cb:a3:cf:9f:80:25:a7:2c:6b:
81:a5:9a:58:82:27:fa:35:76:7f:fb:e0:0e:01:72:6d:84:ee:
4b:95:2c:e6:2f:de:ae:f4:4f:33:c3:37:80:f0:84:55:ef:51:
dd:2e:f8:95:65:e8:b8:0d:0d:54:4a:db:14:1e:37:a0:1d:25:
6e:24:54:84:e8:6b:39:51:67:c6:86:41:61:0e:05:0c:a1:ab:
87:74:bc:98:9d:30:75:3a:ad:d7:48:f0:70:4d:ae:6e:f2:62:
af:76:c5:99:4f:af:0c:1d:5a:b6:d2:d3:70:85:91:f7:35:10:
21:e1:bc:5b:86:91:41:52:d3:e3:8c:d9:70:c6:a0:94:e2:6a:
db:fc:7d:79:29:46:84:13:7d:38:47:7b:aa:a5:3a:43:52:6a:
9c:2a:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:13 2025 by rpki-client