Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/116df1b4-d9db-3c03-95ab-f2232ce6e504.roa
File: 116df1b4-d9db-3c03-95ab-f2232ce6e504.roa (raw, json)
Hash identifier: dqFD9ZOQVbYT16k8ETSgH+5bum9qZ5bhX35Uls2FbS8=
Subject key identifier: D2:9F:24:77:3B:C9:DA:AB:AF:D2:63:45:B6:B8:D4:13:3D:25:41:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BDE2B85863167AB3B5100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/116df1b4-d9db-3c03-95ab-f2232ce6e504.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.55.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:de:2b:85:86:31:67:ab:3b:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=659f35fa-cf78-4c44-b28f-96c98a988b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:c2:03:47:67:f3:d7:a4:e8:04:84:c5:d1:
50:35:a9:9a:2d:04:eb:02:c7:c0:48:4a:a1:66:36:
be:10:70:fd:3f:34:85:fe:ce:2f:2f:be:1b:70:f2:
1b:d1:a6:1c:12:12:e4:45:0f:e0:d0:29:79:72:8a:
3f:ac:93:42:00:ea:6e:d8:51:bc:8a:f8:a0:98:a8:
b3:83:d8:25:ec:32:d2:31:8b:be:a4:33:a7:63:f9:
84:cb:36:8c:b5:e0:c9:43:07:46:f1:c4:35:5e:93:
45:fd:b2:20:bf:d8:d5:b9:78:21:36:10:ca:01:54:
af:b2:4e:8c:8b:e4:8e:bd:fa:a9:09:33:6b:55:ce:
60:52:76:02:3b:c8:4d:29:f1:3f:6a:42:66:12:7d:
bd:66:d0:10:9b:0e:6b:2f:a6:0d:15:4c:ee:fe:39:
f5:97:28:33:b0:aa:60:70:3d:f7:c1:32:25:5b:e5:
70:10:cb:cb:b2:99:ff:32:1b:e9:cd:23:b1:4f:db:
cc:d9:23:6c:1b:13:75:4e:99:a2:32:91:86:5c:3c:
2a:c0:36:ee:0c:3c:17:08:f9:cd:fb:38:a2:c9:b9:
3a:12:9e:4a:5c:cb:ed:25:e0:fc:3c:8c:8a:13:6c:
ba:41:e1:55:68:d2:21:79:e9:62:ef:8c:6e:fc:9a:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:24:77:3B:C9:DA:AB:AF:D2:63:45:B6:B8:D4:13:3D:25:41:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/116df1b4-d9db-3c03-95ab-f2232ce6e504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.55.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b0:cc:cd:55:09:24:8b:76:a7:2d:68:f1:59:4e:a3:a6:99:
71:52:b9:02:fb:10:f5:65:3e:49:f0:35:b1:68:4d:86:a8:2c:
53:a9:35:e1:ea:e5:7d:6b:0c:2d:e9:61:c7:c2:f3:75:da:81:
c3:0e:54:61:ee:88:07:19:c0:4f:75:88:03:a8:cd:2d:32:6c:
75:c3:73:2d:8f:ff:65:f8:65:5f:e0:70:7b:48:92:10:da:29:
40:ac:4d:71:7f:b7:52:20:7e:f9:b8:5e:d3:af:bf:a6:f3:47:
b1:2f:12:a8:ab:8e:56:51:25:c2:b4:ce:28:22:58:99:79:37:
69:72:97:ed:e2:a2:c5:18:7a:cf:a0:47:00:d1:47:02:84:78:
a1:03:db:4c:92:ce:5d:0f:ae:bf:b4:01:99:88:25:be:8d:b5:
5f:bc:89:2f:e1:47:e1:cb:0e:bd:68:b5:b3:37:f5:ce:18:0a:
40:51:e1:d2:fd:b4:a8:97:5d:26:37:b4:af:9d:93:fe:48:6b:
a6:dc:a3:0b:7d:7b:6b:bb:d4:5a:98:94:d5:ae:f0:a6:b9:b3:
d7:f7:cf:5b:1a:a4:06:4e:cf:95:21:15:7a:a9:71:43:ce:6d:
59:96:fc:61:23:4b:32:ab:06:09:9e:db:16:45:9e:56:34:39:
a4:49:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:06:42 2025 by rpki-client