Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52349211-ac50-30b5-a524-fa6a73d563e7.roa
File: 52349211-ac50-30b5-a524-fa6a73d563e7.roa (raw, json)
Hash identifier: 6GvnoDKE0vvaRnBZARq+JNibLJbFJW+xySvWnf4mXlo=
Subject key identifier: 46:DC:B7:AB:7D:E1:0C:3C:0E:61:87:D4:68:1A:12:77:78:65:C9:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E248CB574D3692820C380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52349211-ac50-30b5-a524-fa6a73d563e7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.16.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:24:8c:b5:74:d3:69:28:20:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c881c99d-853d-4684-a71c-a163e03c0c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:a7:ef:39:41:a7:cf:cd:32:9a:f2:1f:34:
c9:14:04:d7:80:2c:1f:a5:3b:80:e5:22:bd:36:19:
dc:57:ca:3b:da:16:07:2e:40:11:0f:ab:8b:8e:93:
c1:15:50:65:92:88:16:24:97:2b:21:c3:23:f2:78:
21:6d:2f:15:e4:e5:c4:45:dc:6c:a0:6c:fe:3d:56:
44:dd:53:25:2b:fa:63:f0:32:7d:a4:16:c7:48:26:
07:99:df:63:67:d9:2b:66:c9:a4:d0:75:35:0c:b4:
e4:3e:68:81:68:2b:aa:d9:7a:fe:f9:f2:c2:5c:14:
ca:1f:47:66:a8:2e:b1:c6:a5:1e:bf:a2:52:44:cb:
25:7a:d3:43:a5:71:37:82:85:07:ff:e7:2f:10:c3:
3c:63:f6:5e:52:89:2f:43:bb:f2:e3:c7:24:08:3a:
cb:49:a7:17:af:6e:45:85:a9:d9:8e:fc:ea:9d:6f:
0f:c6:ac:a5:56:91:ad:8c:0f:f8:5d:93:12:52:c6:
7a:a5:3b:bf:4e:b0:a2:11:a0:e4:c6:14:bd:37:8d:
26:6f:e9:8e:7e:e8:fb:ec:ff:2d:8c:64:7f:3d:8d:
7c:31:cc:8c:17:a3:a8:e7:62:43:96:b0:fc:cb:68:
f8:c6:8a:a2:af:3e:92:61:d7:6b:e3:ac:15:18:30:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:B7:AB:7D:E1:0C:3C:0E:61:87:D4:68:1A:12:77:78:65:C9:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52349211-ac50-30b5-a524-fa6a73d563e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.16.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:95:f0:7f:8c:74:08:47:cb:3c:a4:4d:82:cd:3b:4e:af:6d:
dd:f1:99:67:6f:36:82:fa:53:fb:40:f7:a3:c3:87:a4:0b:87:
fa:9e:dd:ce:57:24:2a:36:d6:19:b5:bd:ab:4a:ec:8e:87:bd:
69:ad:73:50:e1:ce:bb:a9:3f:19:6a:24:8f:3d:36:25:b1:c7:
89:b4:6f:89:07:5e:e3:b9:3b:dc:65:36:11:f7:84:73:0d:9c:
96:1d:06:c3:ec:93:5d:6a:2a:f0:9e:8d:59:9b:e0:40:1e:c4:
21:fb:9d:b6:52:1e:ec:d3:1f:af:e0:15:77:c9:c1:d1:a5:0d:
fe:f2:db:b6:0c:69:cd:34:fc:68:93:9b:86:5d:19:30:08:26:
09:17:6d:aa:fd:17:0a:98:10:90:28:32:3b:50:59:c1:6e:90:
3a:02:1e:48:fc:21:e7:cb:b1:c3:82:d7:e1:43:95:13:cf:7f:
73:69:b5:40:3b:25:46:50:02:e7:e3:d7:fe:58:d0:9f:96:b3:
41:d8:33:e3:84:2d:5e:ff:c8:1f:cf:1c:ca:87:f0:96:ea:72:
be:84:27:fc:5e:d2:3b:68:ce:5f:1b:10:1c:55:36:db:46:09:
eb:b1:97:4a:93:10:e7:ae:1d:67:64:0b:88:2e:57:32:f9:93:
f3:95:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:52 2025 by rpki-client