Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
File: 3ced9ba4-003d-3df0-b21f-32f119f8becd.roa (raw, json)
Hash identifier: aYzA0txjmBh7Gt9TjB9xfearN8YXQJEXsBMrXXijrfA=
Subject key identifier: EB:9C:E7:9F:8F:2D:ED:D7:08:93:0C:BC:20:94:44:28:8F:72:20:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA5320E81138DD541956480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 13367
IP address blocks: 71.195.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:32:0e:81:13:8d:d5:41:95:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=230f82a2-190e-4537-9ce2-92653d49ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:94:e5:16:70:b0:b4:46:14:94:b6:b3:4e:79:
19:4a:74:0b:8e:10:04:38:0e:19:11:d0:b0:50:69:
67:23:d0:82:c5:13:96:66:7d:31:c6:dd:7d:62:1f:
88:90:70:32:4f:31:56:ce:76:17:74:a1:f0:fe:36:
56:fb:d6:db:ca:c1:2b:a2:a7:56:9f:84:28:fe:2d:
57:da:34:e1:35:db:a6:ec:24:f6:e5:ae:c5:c8:b9:
ec:8d:f9:74:4a:d2:20:de:5c:e1:9f:63:ed:b9:a8:
d7:60:3e:ef:b0:89:72:c7:96:53:20:56:38:64:39:
82:7d:76:6b:09:74:bc:a5:53:77:8d:4a:80:8d:9a:
19:f0:74:26:5b:88:d3:b5:c9:1b:a6:4c:ff:ff:dc:
43:bf:34:f2:52:0b:58:f0:d7:44:9b:bd:3b:3e:7c:
74:bd:54:c5:9a:d3:4b:c1:4d:df:79:6a:aa:2a:9f:
dc:43:82:30:b8:cb:20:f7:32:df:01:db:42:a8:27:
dd:7a:3d:17:6f:96:b7:53:68:47:94:29:fa:84:69:
bd:23:c4:41:ac:20:51:d9:05:5c:07:78:e9:95:a1:
ca:1e:fb:e7:c6:65:a6:c6:17:8e:2e:47:00:bf:70:
ee:f4:c9:32:3c:49:29:18:5d:48:bb:d7:84:5f:0d:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:E7:9F:8F:2D:ED:D7:08:93:0C:BC:20:94:44:28:8F:72:20:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.195.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e4:02:52:23:32:e0:32:37:6e:a6:f6:91:6d:0d:1e:9f:6a:
0e:3a:6a:a5:6b:50:7c:ee:1e:b8:87:a7:da:ba:9e:ee:81:e6:
e1:16:14:97:06:5b:ed:59:41:84:c1:19:c9:9c:28:f8:f7:73:
fe:00:85:89:9f:9a:e4:6c:4b:ef:ae:70:99:bd:e5:3c:73:43:
a5:45:e0:8f:f5:fd:29:0c:0f:2d:d4:2b:6d:fd:27:a6:7c:5c:
32:ca:dc:e0:86:8b:af:0f:9a:50:b2:6c:df:25:35:6d:4d:ba:
78:b3:5c:07:96:5b:41:0b:e9:6e:06:8b:3b:2d:e7:58:59:08:
a3:d5:f6:05:ba:9e:91:ba:28:45:33:9e:23:18:70:3c:24:38:
f3:08:c7:69:93:d8:7f:df:02:29:b6:97:49:6e:dc:3b:50:5b:
67:a3:d8:d3:34:de:00:7a:da:40:ca:b7:ae:a5:33:e2:e9:40:
36:cf:46:19:44:00:0d:3b:70:3b:43:a9:19:5f:31:c7:86:9d:
05:9d:72:bc:c4:81:2d:c6:29:8a:69:20:d4:fa:c6:99:9b:5a:
b8:0d:d2:f6:5f:07:b7:7a:25:b3:97:2d:55:b1:26:04:6c:e5:
5e:b1:ca:94:bd:f5:62:8f:3f:7d:03:27:22:65:fc:6f:f4:bd:
95:20:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:39:54 2025 by rpki-client on console.sobornost.net