Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea3b49f5-ca42-39f1-905e-b45fe8a90fc7.roa
File: ea3b49f5-ca42-39f1-905e-b45fe8a90fc7.roa (raw, json)
Hash identifier: Ji2P4tcVp4ldmJP1fM8PyHLkITe/69q+wJ91DJzHrxM=
Subject key identifier: 80:0D:9F:3C:E4:5F:EB:C7:E9:0C:DD:6A:C8:48:45:DA:46:5C:21:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0935CABAF6759A57D4A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea3b49f5-ca42-39f1-905e-b45fe8a90fc7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.224.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:93:5c:ab:af:67:59:a5:7d:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ea17fbc1-bd44-45be-88f5-2ff2840d8904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:21:82:28:b8:9f:94:92:9b:fe:b4:64:64:
59:44:9e:04:64:c1:7a:c1:f3:51:25:94:68:fe:b7:
e5:12:78:44:38:05:3a:7c:5f:44:30:cf:54:1f:97:
ab:99:a7:f7:57:2f:d7:02:4f:b9:29:17:17:d7:3d:
0c:c0:2b:04:2a:f2:c4:4a:18:4f:46:95:56:1d:e7:
fa:a7:2f:5c:e5:7a:f8:90:96:86:f7:e1:6d:fd:e1:
2e:3a:c8:8e:03:16:fb:50:27:36:94:f5:c3:ca:c5:
b9:6b:74:65:c1:a3:1c:4e:0f:dd:ff:ee:68:48:5b:
a3:d2:7b:dd:e9:ec:42:7b:01:61:61:af:fd:8e:fa:
80:e3:0e:24:d6:7d:0b:da:14:60:9e:88:3f:01:bc:
0d:aa:f9:6c:7b:f2:32:25:c3:46:a3:11:d5:c8:8f:
18:a3:96:26:5b:d2:65:5f:0e:bf:a7:9c:97:31:1c:
39:e7:2e:43:d4:a5:bb:0a:0b:e2:de:55:7b:ec:70:
8a:d0:2a:2e:a2:d0:15:77:ba:a8:b6:9b:2b:1d:49:
0c:0f:9e:7e:87:c3:aa:37:64:5d:5a:1a:90:ac:86:
15:fd:75:da:53:90:49:3e:96:7e:4b:36:f1:54:d9:
48:f0:11:7c:40:fe:36:a8:84:a5:af:f1:c0:e0:1a:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:9F:3C:E4:5F:EB:C7:E9:0C:DD:6A:C8:48:45:DA:46:5C:21:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea3b49f5-ca42-39f1-905e-b45fe8a90fc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a5:f2:8f:08:27:da:df:2e:cf:ac:ad:4b:d6:6a:13:9c:a5:
27:89:b7:e9:4b:ae:7b:84:27:d7:ee:76:64:e5:39:51:7f:8e:
4f:7a:47:05:69:a6:8e:93:8e:20:94:db:3b:db:6b:d6:64:0e:
72:17:e5:50:61:b9:cc:ea:36:aa:9a:dc:ee:da:a8:81:f4:42:
32:98:f6:80:76:e2:99:0b:53:f8:9e:06:16:b4:f1:5a:a3:be:
2f:ee:e9:18:93:27:d0:a9:8c:e1:a0:1a:9d:cb:99:8d:7a:38:
5a:f3:d2:1a:60:f1:f9:47:49:2f:b4:5c:47:a8:af:6b:2a:cb:
c1:7f:57:69:99:5a:4c:76:3d:c4:a2:17:f7:f5:f1:11:7e:0b:
97:50:83:26:49:79:8b:88:5f:22:b5:1b:2e:5f:a6:54:82:2e:
fd:12:f1:e8:3c:ce:85:f3:72:94:c7:5d:9e:cc:bd:24:04:4b:
53:e0:1a:21:43:29:78:51:75:fe:4f:7b:6e:9c:74:3b:2b:40:
a0:e6:97:78:ff:df:36:3c:37:90:64:43:9c:5f:29:6b:93:0a:
a8:40:cc:10:9e:76:78:dc:ba:c1:84:72:22:fe:4a:a6:c6:01:
ea:c1:cc:9a:4d:9b:11:87:2a:ab:6b:7f:c4:02:25:9d:0b:81:
9a:ae:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:58:05 2025 by rpki-client