Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d72d2bc-f0c7-38b5-a774-d92b1abe3e39.roa
File: 5d72d2bc-f0c7-38b5-a774-d92b1abe3e39.roa (raw, json)
Hash identifier: XeR9eYftLt+Y48dhn/frzXkkPyI9ilDeedJrymZv0pM=
Subject key identifier: 63:41:46:68:41:38:76:0C:62:D1:72:A4:94:AE:76:91:4C:0A:E9:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B29009F288BFC54EFFA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d72d2bc-f0c7-38b5-a774-d92b1abe3e39.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.89.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:29:00:9f:28:8b:fc:54:ef:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=820bec7a-372b-44c5-88dc-c52ce01cf322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:70:1a:54:24:45:37:b1:53:73:06:97:8c:
a1:b9:c0:f3:b3:09:8b:14:89:15:66:b6:59:d5:b9:
ec:3b:a6:81:f4:6a:a9:4d:0e:2c:5c:40:84:17:78:
ec:7e:96:10:d5:87:69:5b:b6:5c:e2:34:00:17:4a:
9c:99:2a:d9:6d:13:88:5b:eb:a1:e8:82:2f:43:1d:
9a:44:75:a7:f2:81:84:89:c7:30:28:d2:7f:e7:30:
1f:f5:1b:13:f5:9d:44:b0:67:35:ec:7e:91:92:b5:
3d:e6:14:ce:43:78:03:a0:5b:eb:d3:64:ee:c2:e5:
8d:4f:dd:26:75:a6:05:41:43:12:68:c2:f8:a1:9c:
88:24:f4:8f:8e:1b:be:08:94:ab:81:90:24:e2:2e:
ef:b1:e9:21:79:1d:69:6c:e1:bc:09:53:6c:f4:45:
56:b2:01:14:82:45:7f:24:01:ca:e1:fe:4e:b6:0a:
69:5d:2a:87:5a:8c:9c:c2:20:cb:95:50:59:04:5d:
f9:ea:f2:6d:14:8c:ca:74:81:87:0f:15:18:22:7e:
1b:4c:be:5c:07:40:21:79:ae:2e:e3:56:54:00:c0:
e6:11:c6:52:04:84:f5:06:3f:a2:96:97:e4:52:bf:
e1:0a:e8:01:29:b5:18:35:7a:78:12:3d:d8:d2:a8:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:46:68:41:38:76:0C:62:D1:72:A4:94:AE:76:91:4C:0A:E9:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d72d2bc-f0c7-38b5-a774-d92b1abe3e39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.89.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:f1:3f:c1:bc:b5:db:66:de:f9:6f:ed:88:aa:72:4b:56:c4:
41:c3:75:b7:b7:77:e9:76:ed:d1:db:a1:54:16:00:98:86:cd:
27:07:d5:97:e4:31:a9:a7:f0:00:02:30:2f:a7:e1:6d:13:fd:
08:3f:9a:b8:8e:c3:c5:b8:f6:50:1f:74:d2:98:63:9f:21:3b:
a3:2f:5b:42:14:63:bb:34:03:03:a9:5a:a5:ae:5c:2d:38:a2:
c6:65:a6:b0:b0:f1:f5:3d:61:97:68:00:62:0b:18:f1:37:89:
59:9d:b9:c8:3b:12:1e:29:08:2e:cb:42:9f:21:7c:c7:03:51:
b9:52:a2:1f:70:cd:b4:45:a7:6e:57:18:c6:70:33:fa:68:8d:
6b:f1:a6:a9:89:e3:e7:5a:b6:a3:d2:a9:81:9e:e0:cc:1e:c5:
b8:ed:b1:9b:69:61:d0:0d:b0:c1:54:56:d6:c4:e8:a2:30:26:
17:17:b9:0d:42:13:90:a8:19:26:2b:a2:3c:d2:e1:73:ba:5b:
ac:3f:bd:dc:72:46:8e:8d:6c:42:f2:4a:09:14:f0:c9:83:87:
2b:a5:e4:a1:6c:c1:d7:3b:4c:84:c7:d5:d0:25:51:34:6f:21:
bf:56:74:d2:3d:e0:35:61:d5:f5:7d:32:42:bd:46:11:84:fa:
a5:d1:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:22 2025 by rpki-client