Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa
File: 36413b25-1d6c-34fc-a218-245b7e7991ae.roa (raw, json)
Hash identifier: kiMHa2/7LtFKSXJOyv8diPMwnnwbJcZBW+2lWxKTIBk=
Subject key identifier: F4:89:0C:90:45:0D:3E:C8:5A:A2:7B:4F:D7:26:94:24:79:11:3D:E6
Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5
Certificate serial: 010D0C9F432858490E16B3B8953EF50268FDB380
Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 21699
IP address blocks: 72.21.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:b3:b8:95:3e:f5:02:68:fd:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=e6e902fc-a684-4a7d-b16c-712c985e8e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:7a:97:7d:e5:36:02:cc:f1:99:ae:1e:42:
5d:e2:8f:8b:d1:d6:13:73:8e:a6:f5:de:e8:84:26:
92:a4:c4:88:03:0d:b0:a2:57:14:21:2e:0f:e5:c5:
ae:43:14:d1:3d:80:a6:da:46:75:30:39:14:1c:88:
37:73:4c:fa:87:7a:55:60:23:73:09:47:73:6c:53:
a8:c5:6c:38:b7:6d:6f:bc:ea:e0:a2:a7:c0:6e:65:
93:7f:50:4f:ce:e9:ce:a3:0f:5a:87:d2:2e:40:6d:
c3:98:12:82:d2:74:8b:22:2f:67:c1:d4:23:9f:f1:
7b:24:ad:e5:16:1d:4f:60:af:c1:bb:87:93:53:92:
86:62:41:db:19:b6:af:40:3e:d6:83:e4:ef:9d:2d:
2b:49:d8:75:17:da:74:6b:17:99:bc:28:3e:e4:2e:
33:00:db:97:64:a2:af:86:5e:4a:5b:52:d6:9b:40:
30:2f:98:c1:ce:b2:06:9c:86:58:03:da:76:01:fd:
c1:89:1d:66:60:c3:0c:cf:0b:da:cb:df:5f:56:a9:
ce:4a:89:cd:44:1e:23:9e:6b:0b:f3:41:5e:45:9e:
a8:2c:d8:ed:53:5d:c7:bd:63:02:e8:69:40:4c:73:
e6:87:5f:86:94:99:2d:c1:20:0a:3f:c8:91:e2:3f:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:0C:90:45:0D:3E:C8:5A:A2:7B:4F:D7:26:94:24:79:11:3D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl
X509v3 Authority Key Identifier:
keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:2f:76:e7:e5:d7:4c:ed:0e:e0:33:98:bb:e8:7f:80:1a:6f:
b6:ca:33:ca:07:90:da:54:b3:d9:15:cf:19:78:75:a0:71:db:
d5:0b:12:12:13:aa:ba:6e:e8:08:7f:da:b2:f8:ee:f9:6f:b2:
c2:3e:74:6c:d3:e4:83:48:a5:f8:c0:a7:da:f4:6b:c4:29:d1:
d5:85:70:66:79:8e:95:88:1f:af:57:bb:e2:72:12:21:0c:41:
5f:5f:ce:f1:d5:be:6d:63:26:23:88:26:d7:3b:bd:a3:a5:85:
9c:e8:cc:f5:16:4a:1c:bf:3b:98:4b:38:a4:53:aa:44:52:fb:
b9:58:7e:94:dc:d8:83:8d:56:26:cb:71:7c:a9:52:23:50:e8:
93:ae:78:1b:6b:52:7d:d2:fc:a9:ec:f9:48:f3:65:09:fc:e2:
7d:33:8b:c0:8f:3c:de:45:61:99:2e:bd:0b:de:a2:7f:6b:49:
ac:1e:54:0a:13:8f:fb:bb:d8:47:fe:85:44:c6:dd:9a:e4:f2:
43:b5:d3:3a:f7:18:9a:6a:4d:d3:2c:dd:2d:91:4e:3b:9b:38:
cb:24:f3:c3:5c:79:d1:54:31:17:bd:7b:7b:16:d5:8c:77:c1:
00:65:e9:5b:6d:f9:9a:1f:1f:7c:bc:2f:a7:6b:be:0a:8c:97:
dd:3d:0e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:34 2025 by rpki-client