Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa99b6e-1aec-319a-af7c-3834175480aa.roa
File: 3fa99b6e-1aec-319a-af7c-3834175480aa.roa (raw, json)
Hash identifier: 4yOh/e64HfKieehp7oTSqq35UYv3sXZfTexuV+ryVjI=
Subject key identifier: 19:AC:6A:76:13:9D:5C:4A:28:C5:92:7D:21:FA:C4:9F:5C:EA:33:56
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11241476DA75E04654F2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa99b6e-1aec-319a-af7c-3834175480aa.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.72.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:24:14:76:da:75:e0:46:54:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=dcfbcc92-5fd6-479c-a6b3-d716278202ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:a7:01:21:f5:6d:52:9d:fa:f1:ee:24:06:
dc:2f:d5:97:70:2d:21:93:f2:02:7e:bc:e7:db:55:
c8:24:47:42:d7:ac:23:59:84:39:c5:ab:31:1b:8e:
69:b7:c8:52:70:0f:c1:26:23:2b:18:3b:8b:27:39:
5b:27:63:6f:c3:39:c2:9a:3d:c3:4e:a2:66:28:59:
57:0d:28:62:a0:2c:c9:bb:c8:8b:67:91:1e:14:cb:
e3:72:60:00:9c:71:58:33:69:26:7e:1c:58:90:7a:
4f:22:f1:3a:c9:62:11:7f:94:ef:f3:85:e7:be:5f:
2c:c5:1f:5c:4f:e1:7e:14:6c:ea:d0:ae:ab:85:b0:
d9:76:55:12:fa:d1:5a:09:6e:3e:e4:d3:1c:45:ca:
c0:a7:45:e1:f2:84:c0:14:30:04:49:71:ae:68:96:
e1:95:0b:a9:dc:ee:c9:19:ef:07:88:4f:99:6e:d6:
55:21:40:f1:48:32:6b:1b:1f:ff:af:a3:98:68:f3:
01:0e:d0:c4:ee:7a:2f:89:44:4f:7b:e6:6c:8b:b4:
6a:8d:e6:ee:d2:d2:29:2f:3f:8c:73:0a:08:13:ab:
ad:3d:dc:c4:ef:c5:d9:2b:87:07:e6:da:93:39:a0:
7b:41:ba:f7:7e:c9:8b:d9:e6:7d:99:ce:ff:e1:ca:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:6A:76:13:9D:5C:4A:28:C5:92:7D:21:FA:C4:9F:5C:EA:33:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa99b6e-1aec-319a-af7c-3834175480aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.72.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:2e:52:c0:03:24:8b:cd:9f:7f:9b:cd:7f:46:78:37:70:83:
ce:17:c1:63:12:22:1a:f1:a0:2b:8b:33:61:5d:a6:98:d0:8f:
86:fe:21:f4:0b:ed:39:46:53:5d:3a:f6:9d:5d:cd:e0:8c:5a:
d4:b5:d4:fa:bb:16:75:d2:5c:72:7c:50:f3:75:29:fb:e1:ed:
51:6a:73:73:99:14:22:70:23:a3:f7:20:a8:c2:08:73:f3:2f:
7d:12:41:be:aa:16:3b:8e:93:10:c3:fb:99:69:67:13:d5:12:
41:56:57:3e:96:cc:50:3e:45:e3:6b:f5:51:71:e3:bc:28:fa:
e7:64:a9:a5:5f:3c:f0:5b:0c:73:29:5f:fb:7f:2a:71:e2:8a:
f9:3f:0d:24:3d:ea:9a:de:cf:b6:87:50:b9:15:9e:d2:c2:18:
f2:7c:f0:9d:12:3a:eb:77:1a:ba:8a:5f:fb:9b:99:d4:02:75:
df:44:c5:64:18:97:37:e0:7f:bc:22:67:9c:fd:6b:c5:82:7e:
9f:65:38:13:f2:0e:e9:3a:89:a2:e6:03:da:86:d9:55:c1:81:
93:3d:05:b3:24:14:90:e7:a5:ed:9e:1f:f0:bc:67:f3:3e:68:
53:62:1d:08:5b:1b:13:2e:2a:5b:01:41:6b:b7:18:df:60:f6:
dc:7d:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:16 2025 by rpki-client