Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7cdaf76-5dd2-3029-a35b-3049f1dbf930.roa
File: e7cdaf76-5dd2-3029-a35b-3049f1dbf930.roa (raw, json)
Hash identifier: YYm91Qlu7Te97lgzt2oXw+koxhKECedu7t99JOLuLO0=
Subject key identifier: 20:E4:FB:60:8F:ED:AB:E3:0C:42:5F:7E:16:4C:71:AE:B4:8C:D5:70
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB092DFFD4A81C8A5C11580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7cdaf76-5dd2-3029-a35b-3049f1dbf930.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.224.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:92:df:fd:4a:81:c8:a5:c1:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d3f527ea-0dc2-4d68-af36-0182e0b07936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:d3:8c:b5:0d:80:ff:fa:e9:91:28:a0:b2:
fb:fc:d8:9f:fe:4d:1d:bd:23:77:19:f2:b7:1f:64:
06:00:00:73:8f:96:0a:a4:b4:bb:22:06:c3:f4:8a:
6b:1e:ad:18:4b:80:78:30:b3:5c:41:63:85:3f:6a:
06:b9:19:2d:2b:71:58:e6:80:a3:0f:da:67:80:8b:
8b:f8:18:8d:6b:f7:cb:6f:eb:69:dd:e5:f9:21:bf:
16:54:78:ef:cc:a5:e5:91:91:c1:e0:91:a9:e6:76:
8b:1a:d6:13:71:f1:b6:5a:6b:8a:ed:60:1d:ea:e4:
84:df:a4:c0:92:c0:02:2b:09:d4:9a:32:80:b7:ac:
4a:b3:dd:36:82:74:95:b9:6c:4a:b5:a5:8a:77:4e:
b6:f3:06:ce:64:34:c4:10:04:42:fc:1c:8e:63:2d:
13:f0:c3:ec:29:16:e5:ae:96:8b:e6:c1:81:6e:0b:
34:af:a6:25:d3:1e:28:97:39:64:f0:b3:dd:56:51:
32:00:b0:37:90:56:15:43:0e:0e:18:86:e5:1c:90:
52:78:34:a5:a9:e0:fc:fb:dc:42:b5:c7:6a:aa:ca:
53:81:04:3c:55:76:ca:cd:e8:dd:97:88:22:ad:70:
16:67:14:30:a4:ed:56:d8:c5:a2:83:6b:ac:37:7d:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:FB:60:8F:ED:AB:E3:0C:42:5F:7E:16:4C:71:AE:B4:8C:D5:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7cdaf76-5dd2-3029-a35b-3049f1dbf930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:65:39:33:15:60:23:8f:41:10:bb:94:99:b6:8b:eb:0b:80:
56:94:2d:20:31:07:07:48:09:1b:50:9f:1e:a6:94:35:25:b2:
b2:d8:da:e3:af:d9:a9:06:75:f4:11:38:e4:2e:9f:b6:69:2c:
81:a6:3d:24:31:9b:0c:4b:c6:4a:57:49:ca:d8:b8:55:b2:bb:
23:f7:0a:02:08:19:65:c8:83:af:cc:2b:44:be:10:e5:4c:8c:
d0:31:a5:f7:40:33:05:5d:b9:0d:6b:8d:11:a2:1a:a8:c7:55:
ec:a9:fc:51:1b:9c:d8:cc:8d:e0:60:92:58:de:78:27:67:c4:
b7:cf:89:b1:a1:84:df:91:52:12:51:fd:51:e8:6e:9f:a2:1e:
98:7e:2b:7a:b4:4c:fa:e2:f7:1a:1f:4a:9c:6d:6e:3d:a2:aa:
4d:3d:8a:0e:ea:f3:f6:69:9c:da:2e:00:15:91:04:50:dc:24:
6d:a2:67:27:7d:28:76:0f:04:fb:ad:44:4b:91:27:01:ea:b7:
72:a1:9d:b2:71:5e:1a:b2:37:4c:86:fe:99:99:40:92:01:c5:
c8:30:82:35:a7:b3:9e:e6:fd:d0:84:9e:72:95:1b:cc:13:b1:
42:54:f7:6f:69:90:1b:fc:08:b2:57:b1:41:11:5a:16:d4:17:
44:9f:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:13:06 2025 by rpki-client