Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7956a474-7c0e-3a72-bbff-1a81b4a40f1d.roa
File: 7956a474-7c0e-3a72-bbff-1a81b4a40f1d.roa (raw, json)
Hash identifier: r7C0gjZr7y115p14RJ6zsqZeJLJRlTq/WVfLLyXyHsE=
Subject key identifier: DE:0D:20:87:74:24:51:8D:53:E6:E5:C2:22:27:62:BD:52:7C:56:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B135660BFCF9AE6E18BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7956a474-7c0e-3a72-bbff-1a81b4a40f1d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.238.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:13:56:60:bf:cf:9a:e6:e1:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=bd0053d7-a794-4000-807b-0b303aaf45a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:1d:d2:d7:4f:d0:d8:1b:f6:33:21:03:d8:
dd:28:52:8d:83:d5:94:fa:ad:3d:51:6d:0d:16:b1:
5b:87:74:90:db:5e:c0:bd:1a:a2:96:c7:75:64:b0:
c9:4f:f5:bf:07:89:30:48:85:02:80:61:0b:51:d2:
a4:5e:31:1f:5d:25:34:e0:98:52:5b:e1:90:5f:65:
a8:f4:39:66:bc:42:75:36:69:06:3b:de:35:16:e2:
67:2f:22:61:2e:3a:19:2c:dc:c8:55:53:ff:21:4e:
21:b7:1b:e3:cc:fe:eb:19:2f:d8:68:83:39:63:b4:
81:86:17:44:13:a8:c4:aa:13:b8:6b:f6:fe:55:18:
74:03:aa:e6:a4:f8:6c:5b:a6:44:a0:ca:e4:88:9e:
36:cf:e7:c7:44:a2:39:b8:f9:34:f2:af:2e:3f:3b:
52:c0:d6:84:79:41:f4:74:5b:f4:a8:6c:ab:6a:b7:
f8:d7:bc:c7:70:97:e2:d4:83:87:2e:d6:c5:fe:34:
29:2e:65:64:9b:88:15:90:a7:b0:72:7a:73:71:25:
9a:05:32:b2:6f:af:75:29:d6:ea:76:4e:0e:39:05:
bd:49:69:78:c5:b2:00:57:f7:b9:5c:d5:f9:13:77:
93:58:37:9a:d3:08:e1:bc:35:31:3c:89:27:44:92:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:20:87:74:24:51:8D:53:E6:E5:C2:22:27:62:BD:52:7C:56:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7956a474-7c0e-3a72-bbff-1a81b4a40f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.238.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:48:1f:68:b9:9e:e6:1f:99:9c:8b:46:19:4c:42:99:ce:1d:
70:85:e7:0f:29:64:2d:67:a4:93:78:09:52:b6:22:7f:42:e4:
27:59:2c:e3:bc:02:88:98:d8:ba:2a:fa:10:e8:b8:8f:7c:9a:
ed:b9:89:41:af:5f:89:5e:f0:b2:92:27:c9:18:e5:fb:59:68:
e5:24:e7:ab:c8:d8:87:8b:d6:2e:50:71:20:f2:c3:d1:17:94:
6a:85:0c:e2:9e:87:2d:af:de:fe:37:4b:b5:eb:e8:8c:d3:ae:
b1:aa:59:40:98:3e:03:f4:ba:70:c8:ad:f1:ce:a7:86:b3:0e:
99:6c:24:86:12:03:e4:6c:e0:48:5b:8f:99:3b:f1:ba:41:57:
a3:65:d3:ac:f3:48:67:48:a9:8e:1a:1d:7b:22:46:f3:e6:b9:
2f:b5:cc:1c:08:dd:24:38:de:f4:97:0b:e4:59:4b:40:bf:8b:
2e:4a:b5:b3:59:f1:83:db:ea:58:e3:1a:fb:a7:5a:26:aa:62:
42:2b:6a:db:f7:4a:bb:e7:d8:e3:51:5f:a2:3e:a0:a7:00:bc:
1d:2c:13:8b:d7:81:11:f3:9a:9e:23:b9:ce:95:b1:5e:1c:8e:
f9:e7:d4:2a:57:66:18:03:39:1f:a7:f9:e2:79:a6:18:6f:52:
0d:b5:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:04 2025 by rpki-client