Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa
File: 4a2880a2-399c-391a-b0ff-17a565b54dce.roa (raw, json)
Hash identifier: N4+wBWYpFcDII5kClqH0+2cuVoEqHgaeTmdP5pYjCmc=
Subject key identifier: B6:05:67:68:20:5B:70:DE:E6:DF:0F:9A:FC:FE:1B:07:FB:B8:7E:17
Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24
Certificate serial: 010D0C9F43285848D7A651FA6660D43B487FF900
Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 26554
IP address blocks: 67.59.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:51:fa:66:60:d4:3b:48:7f:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=6a4f29e4-859c-4d60-9caf-af3937351f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:2a:48:0d:c9:5a:f4:7b:f1:58:58:e2:02:
8a:bd:ad:69:b4:13:d9:cd:6e:3a:10:23:8a:fc:81:
8f:82:b7:9a:b7:ea:b0:75:4e:e5:8f:76:5b:08:f6:
7f:51:4b:58:59:de:d8:2e:fa:0c:c1:5f:92:bd:85:
7c:1e:49:3a:92:05:da:9b:54:1d:aa:9d:af:b3:ee:
82:be:55:45:50:11:3d:d1:b0:38:94:ba:ef:a3:3b:
e8:2b:79:b2:91:a0:30:f0:dd:7c:89:31:76:67:2c:
6e:db:a7:7d:3d:c3:b4:88:fa:ac:fe:60:23:d7:fc:
9d:d3:2a:15:51:59:bb:2b:d8:0b:50:c9:6e:dc:9b:
6a:b1:ad:59:18:71:57:18:4e:25:e6:8f:19:15:5e:
22:7f:37:fe:5d:78:24:10:f4:fd:38:77:70:6b:73:
ef:f7:a2:49:e6:d9:67:6f:b6:f6:ab:ce:3d:0c:42:
e0:72:32:f6:07:1a:5f:33:41:f8:72:d8:f7:3f:3e:
99:81:7b:8c:59:3f:b1:d2:89:5f:da:92:55:c0:f1:
f8:94:2f:4b:5c:cb:12:4b:48:63:74:d8:99:a1:7c:
94:c5:33:ca:0c:4d:3b:3f:d8:53:fa:f8:62:47:6c:
06:2b:a5:9f:0b:c1:ac:6b:c3:b2:eb:1d:03:3a:eb:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:67:68:20:5B:70:DE:E6:DF:0F:9A:FC:FE:1B:07:FB:B8:7E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl
X509v3 Authority Key Identifier:
keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
sbgp-ipAddrBlock: critical
IPv4:
67.59.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:04:84:f1:83:d3:c8:71:6a:1e:9a:3e:34:a0:c0:7b:9c:9e:
c1:f9:a8:28:94:96:ff:1e:9a:9b:1f:bd:33:5f:c5:36:db:93:
8b:81:42:80:8c:53:a4:71:9b:4a:7f:7a:50:d0:5a:fe:86:7e:
8c:e3:d0:0e:b1:d3:d5:c9:48:5c:21:bf:62:2f:6e:7c:2e:2c:
d6:99:56:3b:30:7d:8c:c8:16:8c:71:73:e7:d4:7c:6a:e6:46:
11:28:75:a1:cd:18:25:ca:2a:1b:5e:25:8b:67:e0:27:00:29:
9f:df:68:8d:74:b8:dd:ba:48:fd:c6:d4:c2:cc:52:a9:c6:cb:
d0:09:d1:a8:6d:43:d8:73:1b:ef:56:b6:f0:40:7f:bf:81:5e:
af:a6:0f:b7:a8:7a:06:e3:0c:fa:09:56:74:5e:b3:b0:4d:5f:
a1:d6:a2:8d:20:1e:93:fb:47:9e:0b:bd:ac:94:40:69:d3:84:
21:9e:ee:39:87:2c:e9:27:55:24:e4:09:98:18:76:25:55:1f:
93:a4:22:29:55:85:d1:5d:e6:28:14:32:38:67:dc:0a:aa:2c:
81:09:ce:6c:13:4b:02:19:0c:2f:be:7c:13:4e:c6:91:9c:c0:
6d:b5:df:b6:1c:f0:fc:35:b4:44:ea:d0:0d:1f:db:bd:c0:08:
25:86:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:28 2025 by rpki-client