Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83f84f80-d027-35a4-a04f-8fc0eb45b2e9.roa
File: 83f84f80-d027-35a4-a04f-8fc0eb45b2e9.roa (raw, json)
Hash identifier: N3uU+yuuLwq4Kr49Wvu1NigiXjYc1sL3XDV+fbwevlY=
Subject key identifier: 2A:0B:2F:B9:3B:52:57:D9:04:98:EB:58:AC:F3:C4:8F:17:5A:12:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E5BA33D631051C869A5978
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83f84f80-d027-35a4-a04f-8fc0eb45b2e9.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 73.33.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:ba:33:d6:31:05:1c:86:9a:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=e1ed5b45-dca2-4286-9973-a07bdad39b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:80:10:5c:95:ad:d9:d5:81:44:25:54:6d:
da:8f:51:11:0b:6c:04:04:87:fa:8b:35:33:1e:b4:
15:a7:e3:66:5b:e9:d6:2b:eb:e6:06:7a:2b:a5:fe:
66:6a:f6:34:74:bd:43:88:f5:d2:99:6d:c3:1e:5b:
b7:75:d6:28:0c:37:90:0c:36:70:21:45:9d:82:7e:
fd:6d:89:0f:a1:3d:bb:13:72:db:d3:14:ce:c1:7b:
ac:8f:d2:74:61:dc:b7:27:3b:76:66:db:ed:25:3c:
4f:5d:ff:7f:59:a6:e8:48:d6:ec:c2:d8:66:cf:1e:
5e:74:60:3d:38:65:e5:c2:18:a3:f5:46:5c:73:bb:
72:1b:de:e6:e2:35:e4:db:04:16:d2:ba:b1:6b:34:
ab:9f:00:b8:19:3e:4f:9b:8d:95:67:74:f2:99:7c:
d1:58:cb:71:e9:e4:78:81:d5:f2:39:c1:0c:07:42:
a4:00:98:d9:7b:5a:06:e1:52:90:14:f3:6f:ff:f1:
bb:ec:3c:bf:8c:f1:fe:5f:ba:93:da:56:f3:22:c0:
d5:5b:24:06:b4:40:f7:18:f2:c3:ef:46:c8:67:02:
bb:af:2f:cf:96:55:f2:90:be:15:53:a1:e2:d7:ab:
a4:e3:da:78:cb:58:ad:6f:3e:ff:7f:02:0f:09:9c:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:2F:B9:3B:52:57:D9:04:98:EB:58:AC:F3:C4:8F:17:5A:12:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83f84f80-d027-35a4-a04f-8fc0eb45b2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:90:63:8e:fc:4a:6b:e2:db:d7:fa:58:ef:d4:34:e5:a2:7c:
59:45:c2:0b:d5:e2:27:e9:96:c8:ce:07:f2:4e:2c:72:f5:35:
2c:03:4b:4d:00:a5:be:4f:76:ce:7d:5f:cc:1e:9f:8c:c0:9b:
13:40:68:9f:ae:da:a6:66:c6:86:b7:0a:2a:a3:99:f9:7d:50:
9c:7f:23:3b:bc:cd:65:4b:0f:b9:70:1a:4f:cd:a8:01:bb:f6:
d4:4c:6d:22:9f:62:b0:b2:fa:99:20:8a:cc:41:db:e2:57:c2:
3b:ad:0d:92:e4:65:54:e2:a5:fb:57:c1:4e:e9:64:56:c7:5a:
f0:1a:8b:00:ce:af:a0:3b:d7:84:af:74:43:d2:f6:e5:a0:46:
59:13:0b:22:1f:12:ae:c5:89:41:2b:d0:c6:fd:a8:90:40:04:
e6:c7:87:6e:1c:8e:65:60:04:dc:97:a6:74:aa:ff:0e:1d:e4:
5b:d7:df:a3:ce:cd:6a:1b:2a:58:b3:37:25:d9:1e:10:82:90:
bc:5f:26:8b:b9:c3:4a:6b:c8:6e:5b:05:5e:3c:88:f5:df:40:
16:55:51:bf:7c:b9:4c:50:60:86:7b:57:f1:d7:0f:cb:e3:a3:
d8:de:c0:f8:8f:96:ac:0a:15:23:10:16:f9:2d:1f:08:53:67:
81:32:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:26 2025 by rpki-client