Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c86b56-85fc-3b34-a9c8-4ac6d4e4dd58.roa
File: 91c86b56-85fc-3b34-a9c8-4ac6d4e4dd58.roa (raw, json)
Hash identifier: mF09A/9xiWqcdTFne3tASDOEILAlOyAa7EfoQSYR2Cw=
Subject key identifier: CC:78:C0:87:AD:94:27:C5:2F:A5:05:82:A1:54:F1:AC:C3:D2:D0:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11A73A63DF9D41292E41B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c86b56-85fc-3b34-a9c8-4ac6d4e4dd58.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:a7:3a:63:df:9d:41:29:2e:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9b2d5783-b3eb-4753-9ad9-092898c796f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:f6:64:eb:8b:88:07:28:25:52:cf:73:ab:
72:5d:81:1c:c5:fd:13:a0:ac:b3:e1:c0:4c:94:84:
7e:df:63:82:20:52:fc:08:3f:64:ce:f5:2f:34:d0:
2e:26:42:55:b1:3c:16:1b:ab:ba:ff:c7:09:c2:8d:
37:26:e1:5e:bf:5c:77:ff:00:d4:9e:26:84:4c:e8:
02:8b:74:40:54:8f:c6:de:79:b1:39:8a:05:cd:12:
b9:13:dc:7d:21:bf:56:4b:89:76:74:a2:7c:9b:1a:
44:e7:08:30:87:da:4f:d4:e9:6d:ba:2f:36:b3:71:
9a:81:02:68:61:6f:3e:0f:e5:d0:9e:56:87:04:48:
99:a4:34:75:ff:d2:c3:42:f8:fc:04:48:de:38:01:
a5:3b:5c:7a:c2:9d:e7:2e:70:42:13:cb:c7:5b:96:
59:59:f3:e8:69:2d:aa:f4:83:c3:ef:de:5a:3f:d8:
92:d9:0e:d8:60:73:9c:a3:61:58:39:f9:45:d7:b9:
be:8c:23:3c:11:e7:da:85:82:89:1b:4b:22:55:41:
84:29:04:46:f4:8c:f5:30:85:65:23:3f:82:11:50:
73:b9:26:54:52:cb:cf:88:b6:fc:d1:e7:44:27:a9:
d6:b7:5d:07:54:88:b6:5d:8b:6f:07:83:7a:15:c2:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:C0:87:AD:94:27:C5:2F:A5:05:82:A1:54:F1:AC:C3:D2:D0:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c86b56-85fc-3b34-a9c8-4ac6d4e4dd58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d7:02:c1:6b:a0:36:5e:e0:14:11:2f:0f:cb:b3:dd:85:c7:
65:a1:db:9d:2b:72:47:1c:5c:11:ce:c2:f9:74:b9:cf:44:e6:
b2:7e:75:24:51:33:f4:5e:c8:56:94:0d:6c:1c:35:bf:a4:07:
7b:5c:c3:ac:b8:3b:06:ad:25:6d:2a:8a:04:8d:d3:47:52:c2:
72:87:72:12:ea:38:36:8a:db:95:06:e0:16:c7:a9:77:e5:ec:
42:76:c3:49:d0:a6:e4:49:b5:ba:43:ca:89:ff:c3:ec:e6:23:
ce:5d:c6:b9:f8:f3:bf:0d:0d:30:6e:b4:d3:aa:cd:ac:e4:4e:
82:ee:01:07:6a:a7:6e:9c:56:c2:8d:f7:75:37:33:f5:48:34:
97:04:8c:3a:02:86:6e:ea:93:0a:c5:01:89:a7:53:09:ba:f5:
fd:67:30:d4:0c:a3:2d:4f:d4:52:9e:11:2c:f5:f0:16:fd:10:
c6:4e:90:de:39:16:25:89:17:f6:7c:0f:e7:8c:95:75:69:26:
58:23:05:05:e7:ac:3e:ae:de:ea:72:ed:95:c3:7c:82:7e:10:
f0:e6:53:29:17:13:00:a1:05:94:0a:6a:6e:4c:0a:04:7a:3e:
d3:65:38:eb:ac:56:84:fe:67:de:e7:f0:1c:14:5a:04:ec:a3:
14:a8:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:27 2025 by rpki-client