Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41500c29-1468-34f5-a5d1-6055bcbb1b64.roa
File: 41500c29-1468-34f5-a5d1-6055bcbb1b64.roa (raw, json)
Hash identifier: UINPP1QpiT4TnKmy+0uMKB12YwCKxoN0WU6jVEMNSPI=
Subject key identifier: 0F:F8:72:BF:19:52:B6:01:71:9C:47:4D:79:36:51:33:DF:44:B9:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12EA424EC7C3EB00D85440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41500c29-1468-34f5-a5d1-6055bcbb1b64.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.8.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ea:42:4e:c7:c3:eb:00:d8:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=456205f3-bace-4731-9d33-fa17e7373158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:e1:6e:0e:f6:c4:03:7e:11:ed:e8:60:4a:
a9:29:66:0d:fe:23:b6:78:32:9c:ff:64:8a:0d:3e:
49:cd:aa:ee:af:97:23:0d:05:95:d6:62:bd:e8:be:
4f:2c:af:1d:e3:a1:a7:e9:5e:74:ef:75:dd:08:3a:
cb:bb:58:58:2f:c6:ad:7c:3d:e4:bf:ae:dc:58:de:
ce:fc:b1:7c:37:8d:d2:3e:d9:f3:0c:67:d5:9f:94:
31:15:aa:15:88:d8:de:65:c1:d6:be:dd:11:14:1c:
c0:c7:b1:e1:f3:dd:d4:f7:e9:40:b4:bc:d6:41:c7:
fb:d9:ea:63:d4:bd:67:55:d6:a8:91:41:95:1c:5a:
1f:3e:bf:b7:e1:49:c6:d9:72:70:34:ca:32:60:e6:
e9:51:4e:8d:1a:95:e5:94:f8:2a:fe:25:b3:7b:9d:
d5:12:62:1e:5a:ee:6d:78:83:98:8e:25:7f:a2:85:
9d:12:cc:09:8b:6d:f6:ad:b2:0c:94:0f:7e:42:00:
0c:24:3d:43:64:93:21:a7:e5:e5:2c:1e:f0:e7:d6:
12:12:5e:ba:58:03:05:c8:a4:81:01:31:f0:32:c6:
e8:5c:bc:9a:d5:da:b3:43:bf:81:80:92:0d:3f:a8:
ed:69:dd:0b:f4:d1:bf:e5:49:09:07:7d:cb:72:02:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:72:BF:19:52:B6:01:71:9C:47:4D:79:36:51:33:DF:44:B9:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41500c29-1468-34f5-a5d1-6055bcbb1b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.8.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:71:6a:6d:75:3b:0a:73:24:0d:98:5a:cc:f7:25:2c:41:25:
1f:f2:7d:78:3b:57:13:c1:53:7a:e3:89:d6:8b:48:a0:f4:3f:
c9:ad:40:21:d5:4d:a4:4d:16:7c:78:cf:b1:38:26:f0:8d:41:
64:25:1e:d1:25:63:d0:fa:d5:0f:89:dd:d8:49:b8:74:f3:11:
b7:c2:a5:0c:6d:be:51:b1:b6:f1:41:3b:8e:22:3a:e8:1b:59:
08:44:74:34:03:40:f4:d5:6e:b4:27:94:99:da:b7:07:9a:3a:
63:08:b4:9d:f4:72:43:c7:30:5d:c5:a1:c9:30:0b:4b:f0:f6:
2a:63:df:61:ff:c4:14:23:a6:49:b2:02:fa:cd:2e:85:3d:f8:
40:1a:22:16:94:19:38:5d:bd:44:8a:df:a7:f8:8c:50:70:dd:
3a:74:3d:f4:6b:4a:24:ae:e9:46:ce:45:63:01:49:fb:ab:f3:
fb:48:cf:d3:04:97:e1:62:b7:57:a7:01:1d:ab:32:04:58:59:
32:ce:22:53:2a:7f:b7:ed:01:d1:5f:c1:4a:bf:e9:8e:de:7a:
af:98:4a:a6:ef:1f:d2:c9:1e:8e:a1:e9:77:be:c3:f4:54:f2:
43:c8:d3:ce:6c:93:d2:a1:3e:dd:fd:56:5e:53:78:79:48:b8:
55:1c:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:11 2025 by rpki-client