Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c5c4dc-4109-3f6d-a440-e2227c9515a3.roa
File: 97c5c4dc-4109-3f6d-a440-e2227c9515a3.roa (raw, json)
Hash identifier: KMbq0zLHGlYlNsbiutIW+8UsSxhVQ7k5Th1lEh4n2Uo=
Subject key identifier: 73:9B:DB:33:F7:AE:30:61:9F:7C:39:74:24:FC:7E:D4:34:A2:66:E6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B192B58EF5240D4881B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c5c4dc-4109-3f6d-a440-e2227c9515a3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.38.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:19:2b:58:ef:52:40:d4:88:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=468ae7db-c2c9-424f-8004-ce484b90a2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:3d:fc:7c:9f:99:dd:5f:1a:5d:2c:2e:62:
16:20:03:7d:b7:26:f8:8f:01:3f:0f:a9:ef:b9:f4:
4b:44:73:87:68:03:ab:f1:a5:1c:a0:b3:eb:02:53:
78:c0:dd:53:d3:49:d8:5e:20:ac:5f:50:09:20:83:
9e:d6:ff:98:7e:4b:68:94:e0:ae:99:3f:6c:92:54:
67:11:d5:9d:0f:54:56:eb:79:57:de:a9:6a:13:93:
b2:d0:19:0e:25:2e:22:55:cf:b6:66:16:28:2d:e6:
94:6b:c9:39:d6:53:91:7a:eb:23:cb:b2:8f:eb:10:
bd:68:6f:a7:03:8d:85:e6:f8:bd:44:a0:0e:c9:a9:
f5:50:0c:0f:17:37:f2:db:3c:03:92:f0:7f:fc:a2:
eb:4a:9c:bc:4d:ec:f8:a9:94:79:58:a1:fa:ce:7b:
ad:71:46:bc:83:ad:fa:6d:b7:5a:60:67:bb:ca:d3:
b0:0c:28:c1:1a:94:48:1a:73:b5:ea:07:e1:f1:6a:
8b:cf:3d:67:fe:90:b3:08:e5:39:85:08:96:06:55:
be:82:e0:1e:77:58:4b:b4:9d:17:24:b7:1e:09:07:
28:23:5e:d6:ae:d0:8e:25:f0:02:fa:36:e5:59:95:
ae:75:17:8a:3e:75:5a:0f:2c:4c:56:3d:2a:53:a3:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:DB:33:F7:AE:30:61:9F:7C:39:74:24:FC:7E:D4:34:A2:66:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c5c4dc-4109-3f6d-a440-e2227c9515a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:5a:c9:63:ba:e5:23:e4:49:03:00:ad:7a:4a:f9:7f:ce:cc:
62:97:6a:d5:bc:02:8d:c9:91:d9:6d:c8:24:24:73:ea:89:1a:
62:42:34:b6:41:7c:2b:53:ed:a3:00:fe:bd:42:0e:24:fd:8f:
c6:bb:d9:92:26:33:54:1c:96:ce:3a:f8:a5:90:4f:c2:bb:3d:
a3:30:ae:1c:be:40:a7:3e:90:17:f6:9d:cf:33:64:63:01:32:
16:fb:fc:c9:78:a1:4f:48:01:40:b6:fb:bc:e8:07:e0:c2:fc:
d7:76:ef:d2:87:6e:46:44:b8:f6:12:37:25:31:a0:c7:f5:9d:
9f:11:47:e2:ce:2c:5d:c1:19:e0:57:de:5a:cf:07:84:c2:9e:
8a:b2:2e:16:40:9f:3f:7f:6d:96:47:08:b3:ea:33:8b:68:5a:
36:0e:02:16:09:29:e5:b7:c1:d7:c0:f0:1f:eb:da:d2:4d:bd:
25:df:b7:6c:ab:4c:c9:15:61:b0:03:80:f6:03:81:a6:70:94:
41:e5:d9:5c:27:b6:1a:03:59:16:ab:d4:a7:11:4b:14:14:72:
19:b0:5d:d0:5d:53:76:c3:7a:a5:da:c5:79:9f:1f:1d:e3:7d:
52:3b:2d:46:36:18:a4:ae:1a:f8:9c:70:53:9e:5e:f3:ba:3f:
82:ed:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:27 2025 by rpki-client