Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d6a1b05-5f18-321c-bff8-351743189e7d.roa
File: 5d6a1b05-5f18-321c-bff8-351743189e7d.roa (raw, json)
Hash identifier: XTEIxk45Wkr5xSMXTVBOjJE2Rz+fmU8MlRc0kacn8is=
Subject key identifier: 9E:2A:A3:C6:BB:E8:98:F8:2B:19:65:95:35:9E:30:D7:7F:DE:30:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BF048219FD6CEFB6ADF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d6a1b05-5f18-321c-bff8-351743189e7d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.76.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:f0:48:21:9f:d6:ce:fb:6a:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5ba3f0ed-8552-4449-9e6a-72b9cf3b66a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:3b:97:38:68:19:27:86:36:4b:90:7b:cf:
21:e8:52:50:bc:29:0f:ab:f4:1c:89:9f:84:02:28:
c7:7b:aa:c0:44:04:94:01:dd:1e:8a:ce:a2:7b:1e:
4e:2b:fb:b1:03:6c:bc:80:b0:d1:4c:9d:ba:1a:a9:
53:ae:53:28:77:a4:33:48:9e:26:62:55:ab:37:bc:
75:f1:ff:db:1b:7c:9a:0f:4b:85:f5:41:5b:9d:d6:
51:21:64:d6:34:3f:5a:80:13:7a:96:39:cf:a3:f7:
82:4c:b2:a5:fd:70:0e:e8:d6:6f:c0:df:c8:dd:c6:
3f:0b:2e:ec:0d:3a:d1:d5:37:0f:3f:b4:43:f6:d5:
a5:0c:03:b5:15:67:a0:8a:86:05:aa:a7:98:83:21:
76:b8:d7:3f:d9:cc:10:72:9f:80:c7:7d:90:4d:7d:
6f:3f:eb:72:ac:e7:59:a9:4e:da:95:49:95:7d:01:
64:dd:d9:23:cb:74:0c:2b:dd:49:6a:f5:5f:c8:a5:
d8:27:81:e7:5c:30:a0:70:45:07:ec:89:29:63:98:
25:22:21:76:99:6c:3d:38:a0:7f:b7:34:db:82:e1:
33:d0:7a:32:d8:a5:0b:6f:29:e7:e1:bd:9b:f0:1b:
b5:6f:7b:a1:04:56:85:05:e5:8a:ad:fe:6a:68:f8:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2A:A3:C6:BB:E8:98:F8:2B:19:65:95:35:9E:30:D7:7F:DE:30:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d6a1b05-5f18-321c-bff8-351743189e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.76.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:63:ff:ec:46:41:ad:e1:37:9b:2f:55:2b:80:c6:d9:2c:90:
4e:56:e2:36:fb:04:79:34:c3:b0:93:de:35:d9:3a:28:eb:7a:
33:67:3a:ae:ed:66:51:b0:cd:03:3a:a5:11:17:74:77:aa:32:
2e:d8:72:34:4d:a2:64:b6:60:1f:b2:dd:e6:6d:d8:51:88:28:
af:16:ad:04:b7:c5:46:45:30:fc:74:df:3b:34:ea:9a:1d:f6:
fd:7f:dd:12:8b:92:d7:ec:5e:e1:8c:73:97:79:59:b0:ff:a2:
74:bf:60:3a:c4:89:c7:8f:f2:89:c5:8f:cb:97:67:42:58:59:
18:83:24:6a:52:a7:1b:6a:5a:65:5c:c2:76:7b:95:28:01:67:
fe:81:c2:2d:d3:b9:14:75:fa:d1:48:07:e8:4d:07:c1:ae:56:
93:86:d3:19:ff:df:55:1d:55:c1:f5:d0:18:ce:eb:e8:f8:30:
72:42:2e:17:53:db:b6:48:0f:7c:fe:d7:c9:58:60:a6:e2:94:
1d:59:7f:cc:45:57:8b:c7:06:01:16:ce:cb:cf:a9:4d:0f:0b:
d4:54:be:59:ab:cd:19:b5:55:18:28:46:43:e6:46:13:b7:d1:
4d:22:66:66:66:06:da:36:15:36:68:ea:5e:c6:83:b4:56:c2:
7c:56:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:39 2025 by rpki-client