Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04e5aecf-dc35-3c11-85ba-a642e2816784.roa
File: 04e5aecf-dc35-3c11-85ba-a642e2816784.roa (raw, json)
Hash identifier: 28tj1t3uyGj9C8gZ1/62RqDEyUa+vVnrzCDrVol8ddU=
Subject key identifier: B6:A2:2D:13:82:F0:40:75:C1:06:1F:E8:E6:92:C9:53:8B:41:B5:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B1FCE3D1CC6812D2CCEBE
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04e5aecf-dc35-3c11-85ba-a642e2816784.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.60.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:1f:ce:3d:1c:c6:81:2d:2c:ce:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0fafb5b1-ced0-4f59-99f5-d1e70ca3c3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:3b:7a:54:f5:18:3e:5e:f0:66:46:81:b9:
76:46:0e:92:37:59:dd:06:f1:7c:60:d8:f0:69:18:
67:fc:05:3d:8b:76:c8:d8:7b:3a:a7:0e:76:e9:e1:
a9:d8:3f:6e:04:20:28:ea:4c:37:6e:7d:90:0f:e9:
ec:d8:77:86:3c:66:e8:92:5d:68:83:19:ef:28:79:
76:02:ab:a8:0b:8d:32:43:c3:9d:79:6d:ec:0b:45:
5e:5f:7d:5d:f6:70:f4:78:f0:ed:8a:65:9b:81:b1:
29:73:ea:27:23:f4:c6:47:4c:14:fc:86:50:b7:e5:
43:f6:0d:30:68:a7:63:42:88:5c:dc:1d:b7:63:25:
6e:ad:75:5a:ba:a0:f8:fd:56:59:ca:f6:e7:3b:6c:
c9:3d:b2:93:2b:fc:2c:56:e1:d5:e0:82:32:f2:e3:
48:4d:91:41:25:ed:5e:12:51:d2:f8:c7:e6:f0:b3:
78:af:8a:f0:b2:03:15:15:6d:09:18:9f:90:2e:46:
30:ad:37:bc:e5:da:86:d9:2b:1b:62:06:c1:cd:fb:
1b:b1:83:b3:47:12:a8:59:78:10:76:e3:31:ab:b2:
84:df:be:a2:5b:c3:15:f2:3b:0d:32:1d:1e:c5:f4:
cd:4d:9c:c6:82:a9:55:a6:3e:0e:76:ee:86:d6:4b:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:2D:13:82:F0:40:75:C1:06:1F:E8:E6:92:C9:53:8B:41:B5:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04e5aecf-dc35-3c11-85ba-a642e2816784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.60.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:f0:56:a1:4c:18:b2:81:2b:2b:33:42:e8:8c:51:be:e1:a3:
0a:4a:c1:29:b5:e4:4f:75:64:1e:34:17:e1:c1:3e:28:40:aa:
81:9d:b1:7d:6f:db:2d:bc:42:4f:0c:73:aa:b2:80:63:97:4a:
be:b8:0b:ed:a9:10:a6:78:2d:0f:64:31:a7:05:dc:f5:86:9c:
b9:c7:8f:de:30:63:6b:bd:d0:3e:73:38:5b:9d:21:c1:13:79:
9e:2b:c6:52:99:6e:b5:a9:10:e4:f5:13:11:1a:ab:07:62:55:
cd:ae:a6:8a:fe:af:10:9c:99:dd:31:94:92:2a:20:4b:de:10:
fb:50:8d:33:7b:0e:41:f3:62:1a:6f:96:f7:9e:7e:1f:b8:bc:
c7:68:ec:d6:5c:98:ca:f3:4d:92:21:73:16:e5:24:6b:1b:5b:
31:bd:51:07:88:c7:a7:17:c0:98:a1:da:e1:f5:68:bd:29:f0:
7c:a7:69:eb:50:1d:51:11:65:d4:37:a8:1f:5f:a9:68:d4:75:
2c:38:46:8a:cb:c1:48:33:16:09:4a:b8:4c:f2:9c:fc:8f:69:
a9:08:05:62:ed:34:62:d0:d0:cd:d1:5c:70:bf:21:3d:9e:4c:
09:17:55:ce:7c:de:d8:c9:00:bc:51:d1:fc:61:6c:05:9d:48:
36:be:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:15 2025 by rpki-client