Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa
File: da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa (raw, json)
Hash identifier: FxvvbnTIMt7y3SKYLTh997HMUueuFwZFrAdOnqvjBNo=
Subject key identifier: 21:AA:CE:06:DE:0D:C2:F8:26:6A:3E:02:B0:56:45:79:8A:C6:EE:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8BE88893263C40C431D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.119.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:be:88:89:32:63:c4:0c:43:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3813b4dd-11bf-4e54-835b-167e0fde056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:0e:81:ce:11:4e:96:76:cc:b6:d1:ce:62:
9e:ca:8b:78:87:7c:13:90:6d:8c:65:8a:36:42:aa:
d1:29:d9:d8:58:20:20:ef:4f:73:2e:ce:02:7d:57:
9c:b8:ec:62:5e:5d:65:8e:a9:ff:c9:62:66:9d:bd:
db:0b:0d:0f:ed:a9:71:df:d1:6e:22:e0:a6:ac:02:
9b:ef:d5:49:51:f9:4b:c5:6d:c4:0a:fa:73:5e:b8:
c3:24:17:f7:1a:0c:2d:e9:5d:51:c9:c7:3d:38:63:
2f:c1:47:2a:bc:6e:c6:2f:32:ac:bf:b5:73:60:3d:
32:c0:61:1c:24:3a:7c:7c:06:fd:aa:6b:3a:42:e2:
f7:78:24:d3:e1:ec:f7:b0:56:1f:0c:9d:30:cb:04:
29:8b:d2:16:02:49:0a:91:fc:c0:af:62:1d:a1:eb:
20:2b:1e:9d:31:28:ba:78:a4:c6:83:50:35:f0:cb:
fc:56:8a:96:36:1f:77:59:92:f2:7f:bc:a1:7d:12:
75:3f:59:4e:8c:2c:4d:a1:54:33:b6:98:5d:0a:3d:
eb:57:a3:65:75:37:dd:59:4b:3b:1d:93:9f:70:36:
2d:36:f4:ed:76:44:bd:b2:89:69:6d:d3:e3:4f:a5:
4e:18:a0:35:81:5c:43:70:8d:8e:15:91:20:5a:cf:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:CE:06:DE:0D:C2:F8:26:6A:3E:02:B0:56:45:79:8A:C6:EE:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.119.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:9d:11:6f:d6:d6:67:78:4a:be:ca:bb:02:45:8e:cf:c1:14:
f9:c1:2f:16:41:fb:2b:0b:bc:4f:c6:c4:d3:ca:1b:3d:02:8f:
45:13:23:ff:2f:8d:73:07:1f:54:ea:d0:ad:e8:45:40:f1:91:
35:80:f2:ba:6c:0e:97:e6:28:24:b4:e6:9e:30:24:13:52:16:
9a:6b:5e:2e:c4:82:ea:8c:3a:13:75:90:74:af:06:a1:8b:19:
42:2d:0f:6d:f2:be:4a:5c:33:86:e8:d3:6f:8a:36:23:29:ac:
3f:ab:e0:53:91:f6:4c:72:97:d5:22:57:a7:ff:bf:ef:67:e5:
22:b3:49:cb:c8:a6:f8:a9:c5:9b:32:55:c1:3b:e9:29:11:11:
d1:c8:fb:c7:c0:9f:59:13:7f:ad:35:0a:73:62:61:b1:7d:0b:
01:f3:b2:d7:c4:ff:e9:1b:f9:ae:09:9e:bb:d1:63:ca:4c:29:
75:19:22:19:e7:16:96:39:58:3e:e5:d3:79:2d:0a:d7:c2:96:
d2:ec:46:df:a1:fe:ed:de:d8:2a:45:af:d8:b9:bb:3e:7a:a1:
8c:9e:cf:cf:9d:3e:91:cb:5c:28:65:d3:ec:8a:b8:0f:fc:fd:
da:c4:3d:b4:fe:aa:44:19:df:55:a7:92:33:1a:b7:d0:a6:5c:
73:63:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:45 2025 by rpki-client