Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/150c1431-84eb-3016-96cc-cea0dcdd2745.roa
File: 150c1431-84eb-3016-96cc-cea0dcdd2745.roa (raw, json)
Hash identifier: Fhx5UamIBrKvmv8k/t0WjxJNzk0g9C/RKIHImG8H1tQ=
Subject key identifier: 11:69:5C:C7:27:52:CE:FF:F9:5F:CD:BE:27:F5:81:34:99:A3:B1:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1477132BEFBAE115DE3100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/150c1431-84eb-3016-96cc-cea0dcdd2745.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:77:13:2b:ef:ba:e1:15:de:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=17d71e79-7717-4f85-9d96-cac0aaf22c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:9a:f7:1b:49:0a:ad:db:74:92:b5:46:a7:
53:81:8e:62:59:22:43:4a:7e:8d:d8:57:08:49:c6:
83:15:7f:78:61:6a:69:68:86:79:20:e2:78:6e:74:
e9:af:9d:5b:02:85:22:57:35:2b:44:9e:fc:e9:5a:
00:b2:ac:eb:25:59:ce:2d:20:8a:b4:dc:ee:8b:85:
1d:d5:39:c8:57:06:99:ca:a9:6b:71:fc:f0:7e:e6:
50:00:7c:a2:1c:f4:38:5b:64:c1:8a:4a:5a:d8:ba:
98:66:c1:d3:f9:a8:85:cc:c9:61:b4:00:3f:79:9f:
0b:c6:de:a6:11:5f:df:b0:7b:8a:d7:6b:a6:90:5d:
54:55:f3:44:4e:51:88:83:52:00:8e:2b:bb:ff:f4:
68:f2:3d:23:91:65:a4:7c:5e:02:f1:e9:4d:22:f3:
d1:b4:4a:0a:d7:e6:f8:1a:60:57:e0:f0:7f:2e:c1:
2b:bd:46:05:e1:3c:8b:46:43:29:3f:da:89:f8:02:
c4:dd:09:4a:bc:de:be:7d:03:15:0b:90:8d:74:85:
53:e9:da:13:14:44:f7:d7:fa:25:e5:a6:2f:cc:44:
d5:3e:66:03:22:95:1b:19:67:30:18:17:02:6d:81:
e6:0c:72:e9:db:65:af:50:60:ec:01:28:a7:b5:96:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:5C:C7:27:52:CE:FF:F9:5F:CD:BE:27:F5:81:34:99:A3:B1:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/150c1431-84eb-3016-96cc-cea0dcdd2745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:25:c7:c4:35:ac:78:dc:1d:45:2b:03:95:29:b3:82:3a:0a:
f0:8e:37:5c:a9:42:72:7d:44:1c:63:bb:2c:b1:e0:b9:68:cf:
a2:2b:79:cb:e9:e1:fa:c7:1b:e3:93:04:90:b4:b8:46:02:7e:
df:6e:ec:48:91:82:b6:56:d7:2c:e4:a0:eb:aa:6c:0c:1a:0c:
e1:5a:f9:6e:90:31:b9:8e:2c:ad:97:8f:21:9f:16:62:73:2d:
16:d7:42:12:12:37:e8:77:87:43:a2:ab:13:c8:c2:6c:28:29:
d2:74:80:7b:7c:8b:80:1f:1c:fe:00:a5:71:41:c5:a5:51:27:
9d:05:f9:33:13:a2:5b:35:25:20:3c:c3:2c:af:ff:03:ac:c0:
96:68:99:3a:a6:f0:ea:65:b9:37:9d:31:c6:3f:08:fa:34:e5:
0e:cb:0b:8d:8a:c6:f3:75:2d:85:42:7c:fb:1b:38:f4:be:2d:
b1:29:94:d5:c6:c6:9c:cc:a3:d3:dc:67:bc:e0:2f:86:dd:8c:
aa:22:48:a5:c1:05:58:32:31:38:b0:29:64:2a:26:9a:49:f7:
f7:11:99:e6:14:b1:4e:6c:77:f3:40:7c:6a:3a:10:31:5e:55:
4f:31:01:a9:92:ec:07:3f:11:7b:35:40:38:a0:bb:ff:9a:b9:
53:81:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:48:47 2025 by rpki-client