Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa
File: 4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa (raw, json)
Hash identifier: YJ4giBCjNuJRddMAdIEJCqn+H1f51nPDhb0pu4Pm+UE=
Subject key identifier: BC:BE:12:9A:67:41:49:F0:D2:AC:78:35:D6:65:89:BC:C8:CE:9C:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F75D122ADC216BC6ABE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.161.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:75:d1:22:ad:c2:16:bc:6a:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=138c8476-6c14-4623-8522-b85f203e0a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:be:24:b4:b6:7c:02:3b:88:e2:15:3d:d2:
93:c6:3b:9a:41:c8:31:a1:3c:64:36:41:23:6e:0b:
62:57:69:81:29:20:16:b8:6c:61:d9:a1:42:1a:e8:
57:6f:f1:7d:a8:71:52:8e:36:44:5f:d1:6f:ef:40:
86:2f:35:7e:6e:d9:79:8a:4c:e9:b0:6e:74:3a:57:
a8:e7:74:aa:d9:ab:ad:9b:86:93:23:3f:a2:d5:23:
28:81:ca:6c:2c:bd:bb:2f:c2:48:5c:86:75:d6:0c:
c4:2f:4b:9b:30:a5:77:3c:ff:07:e1:b6:56:e1:51:
63:d4:29:ec:2d:70:1f:fd:6c:e3:59:0f:6a:be:3f:
a2:90:cb:f5:12:94:5f:ed:59:18:e7:24:03:9b:aa:
62:95:14:96:c3:e1:e5:d8:b7:e4:6d:30:4b:52:b3:
e0:14:73:67:6c:73:25:cb:95:8f:ff:fe:9f:7a:94:
7a:00:c7:c7:5f:34:f4:b7:60:2d:a3:de:89:db:51:
3a:ec:99:c0:4e:8f:8a:3a:5d:16:ef:06:f0:c3:56:
4e:ee:0e:17:7c:db:da:2c:03:d2:b3:f4:19:c3:fc:
f0:95:43:40:b3:b8:d6:c0:a7:60:70:0e:ab:15:20:
88:8d:65:36:fb:d7:b8:89:bd:89:14:02:96:be:b4:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:12:9A:67:41:49:F0:D2:AC:78:35:D6:65:89:BC:C8:CE:9C:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370f55b-1d35-3bad-9f5a-e14a69cc66f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.161.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d2:05:f8:e9:40:58:15:e9:0b:2c:a0:0c:b7:c5:6c:75:c8:
ca:09:5e:da:1c:9b:1f:80:a3:32:e4:ed:a2:38:7a:f0:26:3d:
b2:3a:5d:49:91:c0:f4:e3:27:12:aa:d4:20:6c:ae:c8:68:cc:
33:79:aa:34:07:a6:83:54:ae:0c:17:b3:4e:76:a9:10:02:68:
da:b6:ca:65:1c:cb:11:4a:a9:4c:07:67:5b:ab:f2:76:92:31:
bd:15:d6:40:00:4e:58:34:f0:af:75:0e:ed:cc:96:a1:16:b4:
78:31:47:61:36:35:07:eb:35:ad:cc:44:78:01:65:88:7d:24:
d2:ad:da:6e:39:3c:cd:b2:31:b0:d7:ba:33:c6:44:6c:f1:b7:
74:04:48:e3:24:3e:c7:c9:0d:89:e7:5a:a7:9d:e0:aa:44:68:
75:bb:d8:a8:a0:5e:1e:36:fe:c3:9b:5e:85:15:5f:42:7a:20:
3e:33:c4:b4:8b:73:ce:ae:72:a9:46:62:62:fa:56:59:dd:f4:
dd:9f:88:ee:d4:58:bf:f2:c7:31:a5:7f:0c:59:73:cb:d9:6a:
da:81:73:b4:04:b2:ca:c2:b2:e5:fa:c7:91:9c:c4:40:9b:b2:
77:6d:73:21:a7:42:01:ac:90:06:cc:f9:3b:60:cb:a0:d1:96:
96:9c:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:38 2025 by rpki-client