Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58c32724-60e8-3afb-ac71-a3555bb50140.roa
File: 58c32724-60e8-3afb-ac71-a3555bb50140.roa (raw, json)
Hash identifier: gvOW6fthJIZCzfK2ofLdsQd8P8ULwP3wMm48mMGls2M=
Subject key identifier: 7E:8E:05:05:C1:91:7F:32:A3:2F:D3:9E:9A:22:D2:E6:D5:0B:ED:BF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1476DB5828505B71BFE480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58c32724-60e8-3afb-ac71-a3555bb50140.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:76:db:58:28:50:5b:71:bf:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=141c4270-86ec-48a3-b388-f34fb37c10e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:3d:62:76:69:cc:0f:f4:dc:04:1b:80:c4:
c8:8d:8c:1e:9f:68:a2:2d:f2:65:0e:5f:5f:a0:4e:
a2:7d:76:cd:a6:e2:56:fa:50:92:51:76:bf:45:5c:
92:16:95:2f:8c:8d:57:26:e4:16:51:e1:8f:a6:3e:
ab:2d:28:6e:48:a1:85:a2:24:10:1d:49:19:e4:ba:
d4:f3:cd:0c:10:c3:f8:99:cd:d1:4d:d9:ba:8e:f3:
a5:83:3d:5d:32:79:43:3a:82:9e:fc:db:67:06:56:
36:10:2e:51:e3:2b:c0:2c:27:61:47:c8:12:e4:0d:
2c:36:43:4e:39:1c:dc:f6:d3:57:03:61:ca:bd:fa:
22:ba:78:5c:21:44:dc:d3:93:93:0e:12:33:ba:46:
57:12:b4:51:5e:80:72:96:26:f0:f7:d4:74:88:64:
02:4f:31:65:7b:0a:09:a6:80:f0:26:da:6c:2e:87:
a5:c5:eb:70:29:e8:7b:d5:ee:88:3a:0d:6f:e1:7b:
32:c3:23:21:e5:eb:17:75:a3:d1:35:d6:a3:e2:46:
cf:95:7f:d3:cb:84:c0:6d:55:e6:cf:f7:1c:0c:94:
cc:12:8f:98:2c:77:1e:3d:03:9f:af:62:19:6c:07:
78:15:9d:da:6e:a9:f5:55:2e:ec:79:bd:93:d8:90:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:05:05:C1:91:7F:32:A3:2F:D3:9E:9A:22:D2:E6:D5:0B:ED:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58c32724-60e8-3afb-ac71-a3555bb50140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:1f:a6:c3:2d:99:89:26:fa:01:98:7a:5f:2f:43:1a:8f:63:
9d:21:f0:a9:ed:21:02:79:d7:b2:61:cb:42:b5:cc:84:01:a7:
a9:e5:20:13:f1:07:d9:e9:fe:c4:87:9f:4a:8e:37:e2:d3:c3:
fd:d1:d9:e8:47:6f:8e:6b:f5:db:3d:91:c2:db:ea:79:ce:77:
1b:bc:56:05:06:61:d3:2d:d2:e4:53:76:74:da:05:15:37:e2:
7d:66:0d:05:0e:b5:34:43:37:01:d6:33:a9:c9:d7:c6:bd:4e:
81:2e:75:75:5b:9a:b6:19:fd:66:6b:84:05:19:48:9e:05:b4:
4b:d2:30:53:dd:66:b8:3c:63:d5:b1:53:d1:ae:d4:e8:86:74:
26:90:5c:5b:37:3d:e6:2e:fd:ff:20:a0:1b:6c:d3:fb:18:83:
79:83:15:f3:7e:d0:a5:22:a6:01:62:a4:c5:8b:13:b0:07:d1:
74:61:03:b1:c1:25:11:83:75:5a:90:f5:bb:3c:30:11:bf:4d:
db:76:e4:d6:dc:c0:ef:b6:19:5a:a1:d1:cf:69:04:87:4b:c3:
ac:16:e1:e3:9a:36:05:03:20:35:1d:93:d5:94:c1:03:da:80:
ec:95:34:d7:58:55:03:09:43:44:77:df:88:f4:24:c4:1b:61:
a4:68:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:22 2025 by rpki-client