Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a8f800c-f204-3670-be66-a2a31171070f.roa
File: 0a8f800c-f204-3670-be66-a2a31171070f.roa (raw, json)
Hash identifier: P39sJSSZxwzT1R/TZh7VK8mXjn/kT0wS4ka4UZdp11I=
Subject key identifier: 5C:10:B3:BC:A3:A3:61:1D:F9:31:F2:FD:A3:04:3E:FE:1A:A7:D2:96
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1212B0F7797E5C2E366F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a8f800c-f204-3670-be66-a2a31171070f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.199.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:12:b0:f7:79:7e:5c:2e:36:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=38c30eda-7225-429d-bc76-d3e95d184881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:44:64:05:e9:51:db:bc:52:39:2a:f1:b8:
26:f7:76:79:28:f5:a1:a1:c6:47:0b:62:07:bd:94:
ad:ae:ce:d0:24:d4:ac:a7:5e:cd:b3:f0:dc:18:ca:
24:9b:5a:ad:86:5e:1c:9f:c7:26:a3:59:6a:42:0b:
3d:d8:54:d9:ca:29:d4:e9:eb:72:a7:6e:00:bd:ea:
42:da:3c:83:4f:37:ba:ed:a9:72:37:78:a4:c4:80:
fe:71:a4:3b:48:3e:86:79:8a:27:4d:38:24:e0:1a:
e9:2a:9f:18:ea:43:4a:e1:1d:6c:47:dc:e2:21:d4:
87:e0:af:cd:35:66:70:d5:91:f9:4c:64:49:98:3f:
d7:0f:27:81:a9:73:f5:53:45:cb:94:12:d0:ad:dd:
05:5e:30:82:e6:d6:e7:63:3f:e8:76:96:f0:22:96:
bc:c6:1e:8f:62:68:4d:81:07:2d:bf:e5:50:61:cb:
b1:53:79:58:df:d2:04:3e:c8:7f:4f:88:cf:12:77:
5e:ad:00:c9:19:a2:52:5f:9f:de:c5:56:4d:cd:de:
35:3e:6b:7d:4e:31:37:19:b0:6a:07:ff:ca:ad:46:
33:6f:5b:c6:04:a1:dd:ac:22:6b:bf:7f:f2:fe:66:
8a:78:32:49:01:00:b3:46:47:d9:e1:15:dc:e0:fc:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:B3:BC:A3:A3:61:1D:F9:31:F2:FD:A3:04:3E:FE:1A:A7:D2:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a8f800c-f204-3670-be66-a2a31171070f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:9b:23:92:a0:6d:46:8a:4a:f0:ad:54:af:2b:dc:57:f9:34:
8f:07:bc:9e:54:ca:b8:9d:6d:2d:53:cb:b0:87:5e:94:30:1a:
97:e0:16:ca:6c:34:bc:a2:4f:49:9d:d8:69:e5:ae:88:81:7c:
88:ff:a6:cd:ec:1c:7b:fc:02:46:d2:ab:69:26:d6:cd:6a:7d:
35:5a:6b:b7:a6:5f:39:6d:24:a0:59:e7:8f:3e:37:2f:c5:96:
5a:39:95:e1:dd:a4:14:09:b1:3b:7f:1f:bf:37:37:b8:4b:ea:
38:35:4c:6c:65:e4:15:56:e3:b3:cd:a1:1d:d0:64:51:9b:98:
a8:2f:be:e8:9e:fe:3f:5a:a9:4f:dc:de:3b:9b:be:69:70:3e:
67:64:c0:fa:8d:32:e8:a7:3a:b6:ec:d1:1c:71:e6:94:06:2d:
8f:91:2e:27:26:d3:66:c3:8a:ce:25:f5:68:d6:3b:2a:44:f0:
76:a8:3a:29:38:51:13:7c:9d:65:ab:fa:7f:2d:88:02:88:a1:
dd:1a:93:bb:1f:10:6b:67:e9:73:81:eb:27:6e:83:7d:2d:75:
53:1e:72:bb:2d:4b:90:81:e6:a6:49:f1:56:46:87:b6:c8:5a:
cb:9e:0b:fe:59:e8:7f:9b:21:c3:1a:88:d7:45:8a:da:41:fc:
b4:76:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:42:40 2025 by rpki-client