Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d04154-b437-3794-b498-562abe63990a.roa
File: 35d04154-b437-3794-b498-562abe63990a.roa (raw, json)
Hash identifier: 2EQ5bffvbLG6YSV+ULQxNYN0s2poX76hmJHxxPJeKGw=
Subject key identifier: 87:80:4E:CE:85:38:50:05:9A:42:69:E8:E0:F1:81:3C:8D:6B:E0:11
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10805AD0118E8EDDFFAF88
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d04154-b437-3794-b498-562abe63990a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.199.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:80:5a:d0:11:8e:8e:dd:ff:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=000030f4-6cff-4917-8b10-0e3dc4a31538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:0e:3d:f9:32:78:de:33:45:a5:3a:13:ba:
19:bc:b2:2b:67:4d:f4:77:76:76:f5:d9:81:a9:9f:
45:1b:9f:06:9e:4b:f1:77:6c:75:c4:38:9f:e8:cc:
b9:76:be:6d:b7:3d:43:df:52:0a:65:93:3c:2e:39:
87:d2:d4:06:26:7a:6c:b5:4e:3f:94:9b:9c:87:3f:
90:14:1f:ef:1b:47:40:96:89:70:f5:47:87:c3:53:
de:22:12:ae:15:30:71:2e:20:55:9d:3c:49:a9:a9:
6f:40:30:91:52:2f:cb:e4:34:44:6f:47:cd:ab:90:
b8:92:3b:40:4e:ef:f3:75:2a:59:61:1c:d8:fa:83:
7b:0b:b8:08:e4:b8:07:35:88:42:27:26:7e:df:7e:
f3:84:96:43:34:7e:19:96:62:05:b9:9a:73:1d:b3:
5b:02:f5:ed:94:c4:c2:4b:34:7a:71:c1:bc:49:57:
b8:de:19:33:bc:1a:e6:71:65:07:d0:c2:30:75:56:
02:0c:ce:69:81:84:a4:4b:4f:a4:86:36:0d:8b:6c:
59:99:50:5d:8f:9e:63:1f:1b:a8:2c:d5:9d:31:ff:
cc:f0:bd:98:72:2c:8d:76:69:45:d5:bd:71:b8:42:
2e:cd:a3:fb:c4:72:de:a4:a7:06:d4:8b:65:09:27:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:4E:CE:85:38:50:05:9A:42:69:E8:E0:F1:81:3C:8D:6B:E0:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d04154-b437-3794-b498-562abe63990a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:18:a9:0a:13:21:a5:e9:f8:14:36:cf:52:b4:03:8f:36:76:
c6:1e:43:6d:85:25:80:38:e8:e1:91:18:8d:76:8d:53:60:26:
d2:64:74:ba:fa:e0:e5:3b:15:34:6f:0d:2c:9f:ad:48:e9:5e:
94:05:15:ba:b5:91:0b:e1:ac:77:c7:44:08:4f:96:54:7c:0c:
88:b8:af:b3:06:03:d2:6c:c4:99:64:49:79:70:b1:09:6c:9f:
53:a0:17:18:1d:2b:cc:53:a2:0e:47:9d:0a:81:90:15:69:6c:
93:ea:f2:9e:d9:9a:e8:04:cb:5d:51:9a:34:b5:b2:da:ef:64:
33:3c:e9:1b:32:e9:be:ac:e3:e0:1f:6d:63:9c:b5:5a:a3:b1:
e3:81:c0:b8:83:0e:1a:cf:ed:b4:5a:a4:c3:30:27:e6:38:a8:
41:f5:7b:d0:a1:c6:36:23:3a:16:c5:13:e6:7a:2a:71:e1:aa:
0f:41:41:1c:ee:0c:9f:74:91:f6:9c:47:1b:76:8c:c2:f2:54:
10:bc:86:82:48:ec:c3:82:71:22:2b:94:7f:80:8e:8f:0b:e2:
aa:23:92:92:86:0c:d3:d1:a8:e4:09:c1:31:53:95:ba:35:31:
ea:93:e3:03:2a:19:f9:97:ba:46:35:93:eb:c9:0e:91:4d:82:
e2:ee:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:48:37 2025 by rpki-client