Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a07e83-386c-38cc-95b3-9a7e200173ac.roa
File: 68a07e83-386c-38cc-95b3-9a7e200173ac.roa (raw, json)
Hash identifier: cJvJ0Z+ASFNjdNL6Qp6MRq6SwbH+APz5xXHKeVA6R4w=
Subject key identifier: 37:23:45:E8:77:73:BB:7E:83:5F:EF:F5:C0:F2:AF:65:D9:D1:CE:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C110D97E5340D4500497280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a07e83-386c-38cc-95b3-9a7e200173ac.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.211.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:0d:97:e5:34:0d:45:00:49:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=40b55fdc-795f-4610-900a-3e7a21c48667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:cd:8f:8a:0e:c8:31:14:a7:cf:2f:86:a6:
94:8c:cd:7a:69:d4:a1:19:ca:94:18:55:43:8e:04:
69:33:4d:ba:56:47:cc:30:c6:25:ee:56:61:db:cf:
f7:e9:36:b6:2a:33:66:26:51:bb:27:42:04:d6:aa:
2d:82:c2:a8:97:9b:0d:69:89:d9:cb:91:50:87:c4:
92:2c:8f:44:06:fa:52:88:a3:6d:d8:2f:00:18:cb:
0f:4d:72:cf:a8:6e:0d:15:a9:fd:bd:5e:1d:91:4c:
01:54:12:eb:ae:7a:f9:6f:19:ca:b0:59:e3:d5:40:
1d:49:b0:66:36:31:4e:04:a2:58:ec:ec:12:7e:7b:
07:cf:5c:b2:1e:1f:00:43:48:21:c0:03:1e:26:b8:
98:db:5f:d6:ae:11:15:38:d0:67:27:7d:6f:21:88:
17:b2:3b:cc:c3:ba:03:bf:9a:57:54:f8:7e:33:d2:
ad:b2:c1:c9:da:31:bf:35:84:13:85:0c:96:dd:58:
3f:ef:a1:fe:7b:85:80:22:f8:dd:a2:72:bc:91:b9:
c6:a3:04:4a:d1:4e:d4:e9:4a:5c:a9:db:ae:18:34:
ff:0a:d8:cb:63:a5:bb:5b:67:e3:20:b6:25:85:ca:
77:37:83:39:ce:d0:2c:69:69:8f:a1:a4:0d:41:6d:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:45:E8:77:73:BB:7E:83:5F:EF:F5:C0:F2:AF:65:D9:D1:CE:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a07e83-386c-38cc-95b3-9a7e200173ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.211.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:4d:f0:48:4e:b3:09:fa:79:65:b8:e9:19:7d:5d:87:d7:be:
6f:f0:fd:f6:7d:fd:92:0d:54:07:7d:42:93:be:6c:c7:d1:66:
38:a8:7f:57:b6:95:86:e5:c5:8d:10:17:d4:ec:6c:47:56:5d:
df:0c:f6:e6:d6:5c:09:3a:c7:92:e5:22:97:63:e3:06:e0:f8:
ef:c3:bc:b8:1d:a7:b8:27:3b:e1:22:3b:fd:40:ed:10:99:bb:
dd:27:ae:a1:5f:46:9a:8c:3b:0a:32:45:c4:6b:b2:66:0e:75:
33:b7:f7:e6:6a:0d:cc:a6:60:1a:e2:2d:0a:69:e2:96:e1:fa:
65:d2:a3:54:6e:c6:89:73:78:1a:d5:4d:73:89:b4:9d:61:11:
0c:63:2a:cb:c3:b0:e8:54:fc:26:1d:60:d9:b3:7b:64:6f:1a:
af:34:a6:cc:74:4c:53:9f:09:13:d5:f7:f0:88:fb:6f:c6:fe:
c6:33:89:47:b6:4e:3e:6b:81:f6:25:77:43:2f:82:be:a7:07:
f5:b9:d4:93:5f:6a:71:55:86:d5:0a:d0:8c:29:93:d7:ea:e3:
a2:a7:4f:01:86:0f:b6:0c:f2:a9:fb:11:ed:df:02:30:7b:07:
1f:2b:e0:dc:d0:77:08:5c:66:36:2f:38:af:03:99:9a:ba:5e:
ee:89:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:29:52 2025 by rpki-client