Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89f87cfa-63a4-3e1f-8bce-81a45bc8cd84.roa
File: 89f87cfa-63a4-3e1f-8bce-81a45bc8cd84.roa (raw, json)
Hash identifier: phAp2pL4efOTXnI2QrG084mnLP4/Vdn+Db1j/l8v9xM=
Subject key identifier: C2:96:D1:AE:34:D3:2F:F0:91:32:72:5E:DC:20:2B:B7:35:1B:B5:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FF3FFE240E2E8CBCF7D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89f87cfa-63a4-3e1f-8bce-81a45bc8cd84.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.255.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:f3:ff:e2:40:e2:e8:cb:cf:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2db9d80c-7448-490b-89de-46d7c6cb5aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:9e:a5:b0:b9:f5:f0:ee:d2:05:87:57:72:
bc:30:b4:5c:72:bc:73:16:5b:d9:1d:14:be:03:14:
12:3b:00:8a:1d:a4:f2:b1:40:ac:8a:e0:0f:f2:fd:
a0:2a:f9:ae:a4:49:94:41:bb:5c:da:ac:af:74:cd:
88:03:e5:4e:ed:53:4e:d9:86:57:c0:ea:3a:bf:d6:
78:6a:c7:1a:ea:f1:c8:ed:68:6e:69:cb:48:50:b0:
3b:c4:42:c3:61:25:19:51:40:13:c4:87:c2:40:33:
df:ab:2b:66:e3:aa:a0:cc:9c:ab:74:84:c6:be:fd:
60:76:ae:ae:fc:f8:f5:d5:9b:3c:bd:3b:d2:9b:59:
4b:53:a4:df:5b:60:b0:06:3b:f4:fa:26:76:51:3c:
be:fc:76:6b:f3:5a:ec:a9:f7:20:51:51:c8:eb:8c:
98:d5:d1:6d:70:aa:76:71:ba:65:a0:5a:c4:4f:fd:
ac:7e:56:63:22:96:f1:7e:33:8c:4c:1b:fb:ce:4a:
4f:dd:67:e4:82:c7:26:ec:90:24:93:dd:b5:2b:d7:
28:34:2c:e4:4c:7e:4b:ed:71:0a:56:27:42:57:f0:
c7:1e:67:9b:ee:a3:6f:9f:db:1e:fc:3d:d1:93:64:
99:37:33:b4:08:ef:ee:e7:41:a3:5c:13:13:bb:8d:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:D1:AE:34:D3:2F:F0:91:32:72:5E:DC:20:2B:B7:35:1B:B5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89f87cfa-63a4-3e1f-8bce-81a45bc8cd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.255.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:57:bb:7f:0a:fb:59:20:30:73:d7:b9:e5:41:45:37:78:f6:
4f:29:04:da:e4:02:58:82:3b:ba:5a:3a:9e:23:2e:f1:d5:85:
50:60:2d:d8:94:47:27:57:ad:77:1f:60:3b:db:a2:64:3f:dd:
98:f6:3c:be:68:e5:cf:49:68:09:92:66:e3:40:b3:c5:5c:84:
fa:7e:4b:1c:d9:49:5c:cf:6d:52:b6:cb:32:c2:af:66:90:55:
72:04:ed:7a:f4:dc:65:7f:bd:ea:0d:e3:fa:b0:12:58:31:05:
f6:e8:50:c4:b6:99:54:1f:bb:ca:27:5d:5e:3f:7b:8a:d1:c9:
2b:eb:cb:e1:bf:b8:a6:4a:f9:58:59:ba:e6:a0:7e:05:c5:ef:
77:ea:82:5f:50:55:2a:80:7a:79:4b:3a:47:d1:c4:4b:89:c6:
73:76:f2:24:b4:55:63:0e:9e:09:05:51:99:01:08:cd:32:36:
94:5d:01:eb:da:d1:c1:d0:58:5f:b2:eb:09:5a:e3:4d:26:0e:
81:d2:eb:cb:ee:74:ea:a0:97:3e:f5:99:12:3d:6e:fb:9b:8a:
1a:1f:45:56:45:7f:28:4b:2e:ca:78:70:41:d0:c1:58:96:85:
b9:b5:60:fd:eb:9b:4a:3b:14:34:01:ab:f2:a4:a6:a7:92:d7:
e7:66:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:53 2025 by rpki-client