Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ca6445c-c40a-306e-8b48-9c3427fa7077.roa
File: 5ca6445c-c40a-306e-8b48-9c3427fa7077.roa (raw, json)
Hash identifier: vaPi/LnvMhp0+Yh2XyBJOcB0AoFtOitqoAq3HyD2yjc=
Subject key identifier: 4C:7F:15:39:7C:CA:98:A6:29:5E:C1:60:A4:DE:60:D5:90:D1:97:28
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C118E5C840FAD398C3B6CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ca6445c-c40a-306e-8b48-9c3427fa7077.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.158.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:8e:5c:84:0f:ad:39:8c:3b:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2fea7e62-96cc-4479-bb57-af97be332724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:13:06:60:bd:2b:97:c8:a0:d1:83:31:7b:
9a:9a:24:5c:63:a8:86:7c:cb:57:a9:6e:bf:18:65:
7e:0f:a2:84:0c:fb:86:33:b5:32:d1:bb:5c:fb:4f:
03:80:6a:46:79:6d:39:d4:93:3d:a6:d6:b1:45:45:
d3:44:09:0b:48:93:6b:99:c6:35:55:3c:0a:cb:81:
31:48:b4:82:29:f8:d7:7b:84:4e:51:5a:2b:8b:e8:
54:d0:ef:52:47:28:7e:79:bb:7b:f0:0d:7c:bf:21:
1a:16:4a:5e:ce:c3:25:2e:2a:c7:50:d6:06:65:7f:
fb:04:d6:ec:df:06:6e:8e:a7:ba:2d:f1:7b:eb:f9:
88:22:a8:a2:63:01:76:24:c5:7e:37:f4:a3:94:f4:
a8:45:fa:d0:0b:7c:01:0b:7b:f0:dd:09:f3:d7:b9:
fe:aa:10:8c:78:ea:41:36:22:ec:52:93:37:09:bd:
dd:c1:9d:1c:b2:9d:ed:3d:3f:aa:e1:1e:45:75:11:
3e:dc:7b:f3:2f:6d:c2:ff:69:de:34:44:5d:b4:ab:
ee:85:39:df:73:aa:c8:f6:6f:27:ab:84:52:97:d7:
f0:ad:3f:9b:72:aa:7b:da:7a:d3:5d:23:c8:db:5d:
48:c1:f0:20:c7:49:6c:a0:3c:5c:74:bd:b0:7f:00:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:15:39:7C:CA:98:A6:29:5E:C1:60:A4:DE:60:D5:90:D1:97:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ca6445c-c40a-306e-8b48-9c3427fa7077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:34:2f:d2:2b:9a:36:5c:a7:74:95:62:76:2a:4f:07:d3:fb:
49:c1:23:d4:23:14:1b:9c:82:87:fa:e2:0d:e1:6a:4d:3b:58:
d9:94:25:54:4a:d6:39:ff:88:74:c4:20:5e:02:52:29:a7:7b:
64:25:0a:b9:6b:38:50:07:19:00:24:65:a2:97:58:a9:66:df:
33:75:05:cf:d1:ba:22:58:64:f9:02:ca:e6:61:45:e1:a0:8e:
5c:03:78:06:18:4e:e7:e7:9e:5f:8a:bc:4a:89:23:8c:66:f9:
c1:4c:2e:f3:a8:de:1f:22:50:45:95:ed:e1:29:4e:98:ef:0f:
c1:2d:52:0d:d9:e7:e4:09:fe:c0:66:09:04:98:4a:51:08:8e:
f4:07:9c:09:0a:02:8d:62:3c:5d:cb:a3:76:4e:7d:a3:bd:69:
8a:2c:97:49:8c:0a:c6:7f:97:fe:16:52:bf:95:c9:98:db:8f:
ec:e3:eb:0b:bf:28:82:1e:e0:ef:9e:b9:66:4e:ac:4d:af:e2:
1b:ae:3d:04:04:cc:c3:bd:22:4e:da:4c:d5:99:12:e7:41:41:
4f:40:7f:9d:16:c9:ac:52:9a:c6:7e:5d:ee:f1:ab:e1:92:2c:
09:c8:b6:09:18:ea:be:b6:08:43:3e:61:97:e2:b7:3c:d6:9a:
cf:6e:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:59 2025 by rpki-client