Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab7a87d5-eb49-3d22-b722-e5b4f32e3105.roa
File: ab7a87d5-eb49-3d22-b722-e5b4f32e3105.roa (raw, json)
Hash identifier: j6hJzQ5Eo67aU7y+VP3eXrxKBEE4GEt+ak2iOJRI3AY=
Subject key identifier: 0B:61:9C:52:D4:68:2F:60:CC:81:61:0A:F8:29:C3:0B:58:15:15:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1242BF655DED7F8EE99A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab7a87d5-eb49-3d22-b722-e5b4f32e3105.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 73.13.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:42:bf:65:5d:ed:7f:8e:e9:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=150e1d34-04e0-4e59-8819-552719892ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:08:87:75:dc:d3:51:f7:cd:e6:90:29:16:
97:0f:94:c6:57:b9:35:d2:bb:f5:a3:38:95:8c:e9:
30:49:04:81:7b:74:aa:28:cf:67:f8:50:21:a4:20:
99:60:e7:75:18:f6:8a:c1:dc:be:68:6d:77:53:99:
b7:b7:fd:ca:21:90:5e:81:45:35:e6:7d:2b:44:69:
92:68:28:85:f8:c2:8d:be:af:0a:b9:41:c0:dc:f6:
30:e9:62:11:d7:26:b0:65:0b:8b:51:9a:34:f2:dd:
f8:09:d9:81:fa:de:cd:60:f0:b3:53:94:6b:cb:77:
ea:da:9b:65:e1:df:0d:cf:44:79:51:99:9a:46:5a:
c6:26:b0:d6:93:23:68:5a:01:8a:6e:12:b9:4a:a3:
3e:e4:41:ee:f0:85:1c:ba:5a:54:2a:b9:b6:89:4e:
6c:4b:2c:cf:bc:34:40:45:89:7d:68:4b:d8:19:08:
1b:5c:bb:13:3c:be:ea:41:02:f8:5d:73:0c:74:5a:
9a:60:db:12:b8:cf:9a:9b:3f:7f:eb:2b:2b:d8:44:
51:91:37:4b:21:aa:4e:22:a3:26:dd:fd:db:5f:7b:
c8:86:f2:aa:29:13:a1:be:fc:84:64:53:4e:bd:c5:
3d:b8:d0:86:66:02:5d:70:7c:39:cc:2f:10:cc:03:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:9C:52:D4:68:2F:60:CC:81:61:0A:F8:29:C3:0B:58:15:15:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab7a87d5-eb49-3d22-b722-e5b4f32e3105.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.13.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:6d:27:75:49:be:9d:3a:5d:ea:c2:be:3f:b1:62:85:29:a1:
ac:e8:32:37:c7:50:a6:c8:ac:98:da:08:51:bc:5d:2f:64:62:
bd:21:34:61:e4:e2:a3:2c:9f:67:c2:a0:58:1e:2c:48:ea:38:
1a:6b:06:74:6f:0b:7c:48:9e:40:ac:14:6a:a7:e1:28:7f:39:
e2:ca:bf:ea:44:33:8f:ba:4a:9b:23:a2:d9:0a:fd:35:07:21:
f7:5d:c0:7c:c8:a1:29:e9:ce:4d:db:df:41:e0:91:3d:a5:b8:
7f:0c:aa:af:11:e7:aa:74:2d:63:bd:14:54:4a:29:f9:ba:4c:
eb:72:cf:7b:ab:8d:ef:cd:1d:ba:bd:a6:a7:1c:5f:4e:ba:9c:
be:ee:b2:c3:07:af:57:64:44:8d:b6:1b:bd:80:20:0a:c0:4e:
4c:40:d5:ea:8b:59:ed:df:d4:ae:99:0d:b4:3f:c8:e5:57:17:
56:0a:29:36:8b:08:fd:ab:9d:47:67:59:d1:5e:c1:f2:0b:54:
3d:0c:5c:c2:c4:00:f3:86:f9:ea:2f:2d:fa:3a:4c:c5:0f:19:
1e:df:54:5c:52:24:71:7c:c4:90:92:ce:b0:a8:c6:72:6d:b7:
06:d6:9a:88:4a:dc:23:47:48:03:40:b1:63:81:14:c2:15:f8:
86:46:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:01:21 2025 by rpki-client