Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4176a6f8-08e4-3c32-8ffd-aa47409c5301.roa
File: 4176a6f8-08e4-3c32-8ffd-aa47409c5301.roa (raw, json)
Hash identifier: tFZ7FftDse0iY1zZtE5FHNC81cXBKd0OkqFRBWHwoac=
Subject key identifier: 39:C1:AC:B9:7D:06:93:DB:AF:49:10:99:DE:C7:F3:3B:0C:6A:4A:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E617F3394C9182523E0900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4176a6f8-08e4-3c32-8ffd-aa47409c5301.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 73.29.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:17:f3:39:4c:91:82:52:3e:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=60da2cd2-2840-4ff6-8a22-cf3637a48659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6f:6b:80:e4:8e:24:15:83:a5:ff:cf:d1:fd:
4d:b3:25:d0:53:d2:cf:69:02:39:c3:b1:10:05:32:
cc:53:09:ef:f1:31:59:af:0b:98:0b:02:bd:49:97:
f5:64:2e:cc:08:6d:fb:35:1f:d5:f2:0a:5a:2c:fc:
f5:7c:7a:56:82:5e:0c:05:4e:96:ec:dd:c4:2a:14:
c1:01:01:9f:fc:47:4d:be:8f:18:c9:e3:d9:a6:49:
32:b0:38:94:7e:98:a9:9d:66:fd:16:d1:23:12:e6:
e4:7c:6d:f7:36:6f:4f:a5:50:c0:de:1a:61:06:5b:
49:57:06:b8:73:90:ea:1d:c6:a5:77:24:2e:0c:26:
4d:c3:42:72:a5:40:65:f1:a7:ca:2d:39:23:42:48:
0a:4a:4f:33:ef:55:c3:ae:5a:6f:0b:43:c5:6a:2b:
e3:25:7f:69:c0:87:eb:60:e2:65:4d:9f:21:c1:38:
05:43:a0:b2:97:97:bf:ea:10:e6:65:63:59:f1:5f:
ce:c9:85:b1:8d:03:56:d0:be:01:c2:1b:f5:3d:82:
ea:83:32:d0:c0:a5:64:7d:df:dd:67:57:61:c5:32:
74:23:96:5c:35:06:11:2b:bd:1b:92:c1:d6:83:93:
c1:c0:2b:83:59:39:80:09:8c:ca:7e:8d:9c:5d:90:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C1:AC:B9:7D:06:93:DB:AF:49:10:99:DE:C7:F3:3B:0C:6A:4A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4176a6f8-08e4-3c32-8ffd-aa47409c5301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.29.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c4:9d:d8:c7:ce:76:c2:36:fb:ab:58:74:0a:f8:31:15:3f:
a5:06:33:a5:d9:68:ea:46:20:59:37:36:6a:5e:24:83:ac:f0:
78:17:2b:6b:3e:ab:b6:81:39:19:18:55:fb:14:93:c3:de:85:
27:3e:69:3d:70:fd:f0:1c:88:c8:97:e7:14:0a:e5:90:74:7b:
ac:7c:b0:7c:fc:17:83:71:9e:a4:0f:c4:e4:a2:7a:e1:f2:13:
af:c8:a8:e4:04:ff:d5:dd:93:9f:75:49:de:f4:49:1a:4c:b2:
a8:3e:2d:67:2e:2a:34:6d:ec:c1:2e:d3:42:0e:f0:be:6a:be:
09:9f:46:ff:d6:c3:81:6f:7b:4d:87:7b:65:34:c9:4c:a1:3c:
f1:94:c7:11:1e:6c:36:68:c3:8d:fd:c3:75:74:0e:a6:74:7f:
7b:95:2d:8d:c0:c9:d1:e4:19:17:b9:eb:5a:31:57:ba:5b:57:
42:d9:cf:7f:86:eb:98:a8:df:bb:a8:e6:9a:21:84:87:f8:bd:
07:01:e4:eb:4e:23:0d:2a:92:e0:f0:a3:6f:30:ef:68:f0:0f:
30:c7:a5:36:8f:b7:0b:31:40:7d:73:e9:89:bf:1e:04:1b:d4:
b2:de:09:10:46:60:9f:78:8f:8d:e9:26:20:d9:52:75:24:a4:
79:59:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:50 2025 by rpki-client