Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bf2787c-911a-3336-9f31-29b9b393f76e.roa
File: 3bf2787c-911a-3336-9f31-29b9b393f76e.roa (raw, json)
Hash identifier: R5iTF/6vzgUR1IGip3KZdlVkVIyBipxH3NcKnLW7LAI=
Subject key identifier: 94:D7:1E:40:D2:16:46:1B:91:AB:43:44:90:6B:ED:28:E1:F6:6A:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1126C34B2F1C00F59C7040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bf2787c-911a-3336-9f31-29b9b393f76e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.73.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:26:c3:4b:2f:1c:00:f5:9c:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a55b44c1-9f78-408c-bb81-873a8ed93b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:12:4e:95:b8:b2:01:4b:20:d2:f8:78:d6:
71:4b:e0:bd:2b:7c:59:27:ec:3f:85:6a:62:2b:9a:
a4:d9:92:a2:15:c8:12:cf:e6:04:c8:94:d9:81:3d:
4e:42:0d:57:1f:7d:c8:fb:e6:36:5d:53:ec:aa:eb:
fa:3e:33:e9:4f:03:ec:23:19:18:d2:bc:d9:04:9d:
f6:80:12:fc:32:ec:4d:ba:38:12:47:2f:8b:87:45:
a6:3a:9b:ec:1c:a5:e6:fc:13:9a:dd:62:6a:7d:31:
2d:57:1c:38:7a:bb:aa:16:e2:aa:c0:ea:ce:a0:7c:
01:b3:73:e7:ea:2d:51:b8:60:21:ae:0b:70:f2:49:
39:1d:a3:1a:94:f7:fa:7f:be:8b:f7:b9:ac:10:9c:
e0:8a:c8:5c:4d:2e:47:b1:f7:3f:00:97:17:50:2e:
f7:9f:ea:dd:80:b6:2b:79:43:6a:64:d0:6a:30:ba:
b4:e0:aa:39:34:5b:b9:89:b1:d4:23:f4:3b:6a:b3:
5d:3b:74:38:fb:7f:41:97:88:18:bd:db:2a:62:86:
bc:0f:bb:58:65:fb:38:7a:d4:e7:41:17:44:03:f4:
14:82:fc:b7:d9:82:a5:1c:ee:f4:0d:76:a2:40:16:
8b:a7:d2:35:1b:f2:b6:15:ba:a5:3e:05:06:a0:5e:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:1E:40:D2:16:46:1B:91:AB:43:44:90:6B:ED:28:E1:F6:6A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bf2787c-911a-3336-9f31-29b9b393f76e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.73.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:f6:d9:4a:90:a4:42:8e:a2:a2:6a:6f:1a:96:21:7a:26:c8:
2e:07:87:0d:6b:5b:a1:0a:31:1b:c5:52:cf:85:84:dc:d9:a8:
ca:79:cb:46:d7:2a:59:9f:94:11:79:19:53:d7:b4:d1:b8:d6:
bd:a6:b3:6f:03:47:82:b3:ce:2b:b5:33:e4:f6:45:73:0e:60:
0c:3a:0b:20:df:13:dc:0b:4a:42:f6:cd:22:c2:4d:34:8e:38:
98:1f:b3:c9:bb:9b:8b:e3:21:99:a4:99:db:39:b8:9e:2c:67:
50:25:e0:22:99:71:7e:8a:6c:54:33:3f:eb:5b:1f:71:f0:a3:
31:59:19:ca:9f:4e:a3:94:ec:21:d8:0c:f8:8f:50:81:7d:36:
93:8b:5a:cc:3c:ad:4e:67:bd:84:18:67:f3:c0:69:e0:62:4d:
04:e9:f9:7e:bf:5d:02:66:28:92:d0:93:50:f5:cf:bb:84:3b:
eb:a7:1b:a2:5e:80:b9:07:02:fe:57:09:b1:c1:c6:dc:c5:1c:
8f:40:2d:81:3d:05:9f:a2:e8:bb:e6:8e:23:e4:95:57:b4:4c:
bc:cf:e2:8d:be:7a:e0:af:36:96:e1:0a:25:ff:ab:95:83:bf:
d3:5e:87:b1:49:6b:23:4f:8d:cb:1a:28:0f:ca:be:34:5b:8f:
40:df:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:02 2025 by rpki-client