Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3d6b21e-36ef-3491-ba2d-6d47815b6414.roa
File: b3d6b21e-36ef-3491-ba2d-6d47815b6414.roa (raw, json)
Hash identifier: nxKAsrz+427Wtz7llG1LGVcC1a/tsNBCNyI3O7xW+8U=
Subject key identifier: 47:76:A5:AC:CF:B2:A4:FE:5E:63:76:12:0B:79:E6:0B:B4:32:AC:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AFDB5E083A0EE2E002460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3d6b21e-36ef-3491-ba2d-6d47815b6414.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.17.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:fd:b5:e0:83:a0:ee:2e:00:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=64d7de66-37df-4139-81ca-92d85dbe44ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:1f:07:69:27:70:3b:df:26:82:f6:ae:5d:
55:d9:ca:26:c9:2f:cf:f2:d9:3b:ca:da:af:df:e1:
33:5d:5c:72:db:dc:c4:73:23:1a:69:ee:5d:74:f6:
bf:77:50:38:bf:a5:6d:49:d6:3e:c8:d3:33:00:e1:
ea:a2:49:5d:44:4e:f8:42:ee:77:9c:b6:18:cd:b4:
cb:7b:20:bd:a8:d2:bb:37:be:c7:4f:f0:79:a0:0e:
2d:27:1e:c5:61:2c:18:48:67:69:b8:0d:dc:29:15:
9c:5a:bd:c0:88:ec:f9:bd:f7:5d:f0:57:ee:e0:17:
ed:ba:28:b5:c2:4a:ad:db:86:fb:68:27:4e:44:47:
f0:70:cc:4a:c0:04:f9:96:78:7a:04:25:47:c3:59:
88:5c:f1:ca:8b:da:63:4e:83:2f:59:23:5f:1f:08:
6c:42:61:ba:5b:ad:d1:32:98:77:45:32:b9:5d:ba:
5a:ce:9e:9f:b7:22:c7:26:d1:7d:22:f8:4c:41:2e:
64:85:31:06:68:f8:da:60:8e:e8:98:1b:45:26:34:
f1:85:24:9f:07:ab:07:f0:f7:27:82:75:3c:cf:3c:
4f:f6:8a:d7:52:44:d9:41:13:1e:70:02:16:90:99:
1e:31:03:5f:c7:df:b6:df:18:e4:80:0c:f7:ae:ac:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:A5:AC:CF:B2:A4:FE:5E:63:76:12:0B:79:E6:0B:B4:32:AC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3d6b21e-36ef-3491-ba2d-6d47815b6414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:d6:eb:65:70:5a:7e:92:29:57:4e:bc:cc:53:92:9d:25:67:
63:34:3a:60:46:b8:64:95:04:95:a0:88:3e:4f:38:b3:4b:9e:
b9:12:c1:4e:2d:35:ce:4d:a6:71:3c:d2:e3:ff:c1:b5:8b:ab:
4e:65:13:3e:61:c1:64:2e:5a:6f:24:a3:17:0f:70:7d:ef:9c:
ff:2a:9f:c8:e9:ae:31:8c:e8:82:b5:e2:e8:97:8b:25:5f:4f:
a0:c8:11:bf:92:34:85:22:e1:85:4f:d7:ca:b3:eb:a7:28:51:
32:12:92:b0:69:08:eb:aa:52:f9:a1:e2:a0:6d:a5:30:d3:e4:
38:27:2d:a7:9c:00:8c:fd:c1:c4:31:f3:c1:64:65:3f:94:53:
be:24:0c:f5:f4:54:ca:86:cb:2a:a9:ca:81:91:01:af:87:5e:
4c:31:84:99:91:fe:2f:9f:25:41:11:a5:4a:9c:d7:66:e3:c8:
1f:f2:77:24:e2:a2:be:18:86:a6:9c:4a:2d:80:03:b3:19:82:
89:29:ee:db:59:b2:92:da:27:f4:54:1d:87:ac:39:bf:99:81:
96:de:0d:e0:87:05:e0:b7:10:b4:d4:4b:32:f5:0c:b7:33:85:
74:9a:0f:a6:eb:9d:bc:f9:e3:f5:72:f7:09:6e:d1:7f:ca:86:
b9:5f:5a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:43 2025 by rpki-client