Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b44489a7-b2a9-3c54-a553-e9fecb901025.roa
File: b44489a7-b2a9-3c54-a553-e9fecb901025.roa (raw, json)
Hash identifier: AN1bt3XYV8zuWp7lAftnTWgy/pYN0SwY2IVWavb+XV0=
Subject key identifier: 3B:2F:78:24:5E:43:B0:50:40:57:80:39:12:1E:69:B6:EF:B8:AC:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AB3996FE106565B3D6800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b44489a7-b2a9-3c54-a553-e9fecb901025.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.96.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:b3:99:6f:e1:06:56:5b:3d:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2d84c9a9-d161-4580-922f-0d0ef971a7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:0f:1b:90:f0:a9:df:75:07:b8:6c:27:68:
b5:18:27:b8:13:e0:2d:8f:c9:ab:3e:02:51:fb:8e:
73:c9:e4:02:f4:4d:e7:fa:f4:24:2a:fe:2c:97:ee:
5e:b3:3c:5a:45:97:97:26:bd:ad:5d:2a:de:af:af:
c6:ab:86:09:70:21:b8:fc:8e:67:c7:b3:88:66:ad:
db:2c:72:e6:89:00:cf:ab:af:32:e2:5b:6a:3d:67:
82:f2:bc:38:6a:4d:e4:b0:4f:e0:31:99:5a:2a:50:
ca:40:d6:9d:69:ca:ef:a0:be:59:46:80:ea:53:89:
7b:31:86:f5:5b:94:5c:c4:05:e3:6e:5f:8c:79:43:
d1:1f:33:f5:e9:2a:b3:bf:2a:0f:84:ae:6f:ba:21:
44:4f:71:f7:d9:aa:54:89:54:8e:43:5d:bf:a8:a2:
96:f9:c3:5b:05:94:94:33:ff:58:1a:45:fe:50:f2:
f9:4c:91:b8:84:4d:a2:fa:1a:93:aa:c6:b7:88:b4:
04:fe:bf:9a:76:1e:e6:73:15:2d:55:34:f8:06:20:
b4:41:92:20:48:2a:76:43:84:d2:e5:a9:7b:16:e9:
00:31:05:c9:b4:6a:4e:61:e8:a9:a9:54:7f:ce:2d:
9d:c1:3e:8c:34:6c:56:80:7b:52:95:07:d1:44:4c:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2F:78:24:5E:43:B0:50:40:57:80:39:12:1E:69:B6:EF:B8:AC:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b44489a7-b2a9-3c54-a553-e9fecb901025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:fd:46:d3:f7:b0:ea:e5:74:45:cf:59:eb:e8:ed:03:8b:15:
66:8c:21:9b:7c:a0:f8:bf:85:d6:ca:4e:16:4d:04:80:2e:b8:
e1:1f:38:9e:fd:3b:fa:c7:0e:f9:c2:9e:d6:7d:4e:1e:3e:b1:
44:1f:55:c8:90:91:ed:77:4b:dc:bd:95:ce:48:e4:9c:5d:9c:
d5:98:90:73:5b:a7:9c:a2:3f:8c:4e:6c:12:32:67:56:1b:12:
39:c5:3c:a9:dd:fd:09:10:c0:d1:f2:40:11:bb:3e:13:67:a5:
b2:37:5e:12:19:8f:3a:9c:0c:d0:db:52:ef:d3:c8:61:f1:88:
9c:3b:a9:63:a3:38:9d:b1:bc:f6:81:12:b8:99:09:df:01:af:
f2:1c:89:c7:11:0b:0b:83:e2:b6:ec:82:eb:74:79:f0:2e:7c:
70:1f:82:aa:80:12:f3:22:1c:89:a2:b7:a7:3a:a6:ac:9f:9e:
42:5b:05:38:55:3e:7c:ac:7b:a9:0b:02:89:e7:00:a1:4b:ac:
63:8c:d7:37:0e:45:dd:a0:8e:b9:0d:b8:0c:b5:44:d2:14:9d:
91:e8:ee:f7:7a:b6:44:a2:51:cc:c8:89:c5:d4:bd:1d:eb:3e:
67:3c:91:1d:1f:01:58:94:95:1d:c8:45:ab:73:11:5c:07:c1:
66:f5:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:30 2025 by rpki-client