Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8314c4-6ac3-3077-b5a2-d3d40906e1f8.roa
File: 9b8314c4-6ac3-3077-b5a2-d3d40906e1f8.roa (raw, json)
Hash identifier: bIi5KWxbWdejr6PU7+jc3yL9tkHziVltTpML4VT6+hc=
Subject key identifier: C4:C7:68:79:86:51:3D:7C:A2:04:4D:8C:71:22:97:61:4A:41:33:50
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12A85371DE3A5B8C9B2E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8314c4-6ac3-3077-b5a2-d3d40906e1f8.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:a8:53:71:de:3a:5b:8c:9b:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c9e33b4d-a810-4bf6-8233-b3382970c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:d9:ff:03:f0:0c:a0:8d:54:b0:a1:b3:0e:
b0:3a:8a:d0:e9:4e:d5:a1:83:52:74:e3:e7:37:41:
a0:25:f8:65:f8:fa:f4:2e:99:cf:b6:e3:8b:93:a5:
ba:ea:ea:92:a8:fa:87:13:e6:22:eb:35:cc:4d:19:
e6:d2:ba:dd:bf:6c:16:29:68:d4:d7:56:b8:98:ca:
f7:84:97:f8:61:ec:2d:f1:71:77:17:b7:d3:8c:94:
2c:6d:d0:3a:f2:46:73:fb:bd:c7:39:98:0c:a2:1f:
b1:16:f6:cf:af:cd:38:27:c2:70:c3:0f:93:08:8a:
53:7a:70:fc:fb:d8:7f:4f:f6:18:ac:a7:da:da:0e:
39:c5:75:c5:a8:77:61:8b:e1:67:ae:bd:2e:a3:11:
06:da:04:4e:0c:ed:06:da:8e:f0:01:fb:07:d6:eb:
48:eb:2c:7d:68:79:0f:00:d3:6e:24:8a:0d:ff:6a:
f6:07:1e:eb:a3:c6:14:e3:37:f0:ad:b4:4d:77:59:
01:9a:c3:8a:34:da:8e:8b:60:b2:b6:57:17:bb:b4:
b9:0a:b3:2f:e8:21:c3:48:4f:fe:4e:97:c1:c0:28:
1a:b7:e7:5b:19:8b:0f:63:1f:e6:bc:8d:f2:b1:cc:
36:2a:c4:9b:24:18:92:d3:72:ed:ce:71:8b:c4:03:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:68:79:86:51:3D:7C:A2:04:4D:8C:71:22:97:61:4A:41:33:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b8314c4-6ac3-3077-b5a2-d3d40906e1f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:8c:7b:0a:43:da:c3:a6:c6:08:75:69:20:4b:34:f5:fe:93:
8b:7a:f9:95:df:7f:f0:c2:c7:ea:9c:03:72:46:22:42:52:72:
01:7d:79:97:3b:b3:b8:33:8b:cb:67:ae:fa:df:32:22:8d:92:
6b:73:70:51:51:41:e6:0e:03:44:d8:4c:88:0d:2a:cf:f8:b1:
00:16:3f:4a:c2:50:a1:1d:8b:f8:75:cc:1a:87:0d:87:d7:9f:
30:d3:23:c2:34:b1:02:cf:f5:bb:6f:03:3b:bc:90:b7:4d:08:
8f:26:9e:70:9e:49:4b:49:4e:15:29:18:62:06:f5:5d:14:f3:
f3:db:a2:58:51:b8:0c:0a:3b:9c:eb:6f:cf:f3:cd:5d:23:19:
40:43:e5:da:cb:b2:09:92:79:ae:04:0b:74:df:5f:7e:4a:99:
5d:2b:83:9a:28:de:f5:4b:41:62:f3:f6:71:0a:bd:b0:d0:6a:
23:e8:14:2d:54:ae:24:61:e7:2c:12:d8:dc:73:46:fa:59:eb:
b8:38:8c:0c:e3:90:f0:b9:f0:51:93:d6:b5:67:68:1e:d9:51:
f6:e8:50:f3:d4:b1:69:24:ee:6c:91:4f:ef:37:ab:4f:cc:46:
ad:c7:75:f9:c4:e1:41:9c:cd:7c:1e:0a:d3:c0:48:10:20:0e:
0d:65:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:04 2025 by rpki-client