Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bbe60dd-73cf-30ef-881c-d8776496d5f7.roa
File: 7bbe60dd-73cf-30ef-881c-d8776496d5f7.roa (raw, json)
Hash identifier: Ay9t4fmkjj5v3PFqz1tQnerfuwVXZdIuKT+H5FDtPpM=
Subject key identifier: 57:54:F7:D4:E2:C1:86:AB:68:02:E1:E2:D8:60:69:BD:73:92:19:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12A931B2A26E9085C63E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bbe60dd-73cf-30ef-881c-d8776496d5f7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:a9:31:b2:a2:6e:90:85:c6:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=dcb5dbfc-be14-4c01-828a-20c601f451c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:a8:1b:62:2e:9d:85:68:4c:99:04:c3:d2:
91:f2:b6:00:43:68:f2:ed:40:fa:30:78:8c:fd:86:
4d:ae:50:d3:f9:1c:c3:c2:85:68:51:e4:8f:4a:32:
80:06:0e:bf:00:6a:81:d9:b0:16:16:77:13:d7:2e:
53:a0:1f:b7:33:57:7d:4d:56:62:60:67:98:4c:47:
b5:8a:d2:97:83:3e:8d:f5:6e:93:0f:92:f4:ab:67:
89:ac:11:a3:93:bb:54:07:c3:af:f2:82:fd:31:56:
91:b3:b9:ab:cc:b6:fb:a9:8a:a9:e7:de:ea:65:df:
87:9e:01:0b:9b:55:49:92:ee:af:a1:66:ee:d6:28:
e2:25:1e:88:98:a5:26:b8:09:ed:75:50:9b:c5:d2:
62:0a:a4:f8:f1:1d:a4:a6:a9:6f:94:d2:71:97:6f:
01:f5:b2:75:d2:d4:d1:de:c3:4e:83:35:bb:2b:22:
43:1d:fd:33:11:9f:cf:dc:48:d0:6d:d2:65:d6:c3:
a6:ff:20:60:cc:4d:2b:16:45:a7:47:d0:0e:5b:f8:
09:1d:f2:dd:35:b7:85:f0:52:a9:b3:99:36:c6:4e:
6f:31:8c:f5:41:66:32:2d:4e:c0:59:2b:8e:81:f2:
d7:33:5c:16:ae:53:14:b3:c1:f2:4f:2c:27:dd:d7:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:F7:D4:E2:C1:86:AB:68:02:E1:E2:D8:60:69:BD:73:92:19:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bbe60dd-73cf-30ef-881c-d8776496d5f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:27:fd:f5:d6:e0:76:2c:75:fb:6e:b0:0e:e5:3a:f4:52:cc:
d9:29:68:e0:5c:f7:76:83:dd:eb:2f:bf:44:04:f9:7d:33:6f:
97:91:d6:bb:91:bd:05:a3:13:b3:18:74:4c:d2:b2:2a:92:72:
78:05:0e:05:bf:7d:0f:4c:dd:12:f6:6a:ca:e2:78:7d:d1:69:
99:98:20:76:d8:47:c7:2b:6f:29:d4:15:5e:3c:b6:68:2e:34:
4c:eb:e3:e1:4b:20:dd:db:63:aa:fb:08:80:c5:6f:9f:e4:ee:
05:1d:98:42:8f:eb:b1:58:0d:5f:b5:37:cd:67:80:d7:5d:a4:
cc:ef:c8:0c:20:80:f5:d4:21:dd:f3:92:d5:94:cb:45:b8:41:
1d:5b:ad:d2:fb:d0:50:16:5e:c7:85:1b:55:8f:4a:ba:27:2f:
e3:80:b4:77:bd:fd:5e:a5:49:a6:46:2e:b4:b8:1d:74:ea:b2:
a6:d1:18:84:c3:c4:b6:1b:2a:99:cc:1b:17:f1:c3:51:c9:9c:
55:30:34:26:44:22:12:88:a4:10:8b:20:ba:f9:c2:d8:61:d6:
42:d1:c0:7c:a9:04:4d:68:35:c1:0e:45:d1:3a:9e:29:65:ff:
77:62:f2:5a:b1:03:89:1e:40:68:c5:5e:55:9d:9e:ec:f6:e8:
bf:e8:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:19 2025 by rpki-client