Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b473bd-7ab8-399e-98e9-0ad2e7558b00.roa
File: b7b473bd-7ab8-399e-98e9-0ad2e7558b00.roa (raw, json)
Hash identifier: SIef4zMMV7WQ9pnj3C+7ZzmDFY++CVqt1wdU4qai+d0=
Subject key identifier: B4:4B:C2:10:E8:37:38:C3:09:84:DE:B2:99:54:39:69:2C:10:50:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12D7218420DE9A3DE41700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b473bd-7ab8-399e-98e9-0ad2e7558b00.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.72.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:d7:21:84:20:de:9a:3d:e4:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3bb94c3d-4564-46e2-9bd2-79c41ce776b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:65:b2:32:1d:ff:f2:66:75:b7:5c:21:6a:
09:cb:bd:d2:af:3a:41:98:af:e3:d0:4c:54:24:7b:
4f:1a:82:18:f5:bb:ab:86:4e:f3:6c:1f:00:fa:d2:
de:3b:2e:0c:c5:56:5e:3c:bc:37:f7:28:78:a2:4f:
b1:d4:f9:00:4b:82:cd:0c:fe:b8:73:fc:64:94:85:
d1:04:97:92:e1:24:f7:88:3b:59:6d:f2:db:01:31:
a7:ab:66:2d:0c:25:f4:39:aa:42:3a:af:c6:af:2c:
d0:46:41:a7:a8:77:ae:2b:bb:d3:c4:6e:12:6f:81:
e4:76:a8:a3:be:f4:54:48:2b:57:fe:99:7c:70:42:
fb:2d:e8:81:ac:bd:80:07:e0:2d:d5:02:27:5c:41:
6f:dc:f2:0b:70:12:0f:fb:36:ca:dc:3c:95:a4:1f:
2b:3f:b7:0a:f0:77:c5:2e:fc:d4:bd:60:e1:68:93:
44:dc:53:e2:11:cc:7d:90:e3:01:fe:7a:78:8c:c3:
f5:88:30:99:d7:a0:61:a5:66:13:c3:ca:09:72:82:
3c:30:a7:25:d1:34:d3:0f:fc:bf:86:3b:ad:bf:80:
05:b4:69:a8:4d:32:03:51:35:24:1a:c5:d2:2e:ac:
d6:95:9f:af:61:90:63:0a:f5:34:97:47:38:7f:c7:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:C2:10:E8:37:38:C3:09:84:DE:B2:99:54:39:69:2C:10:50:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b473bd-7ab8-399e-98e9-0ad2e7558b00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.72.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:5f:ea:90:32:ae:fb:11:fd:02:ec:8d:b3:87:e4:72:29:b4:
26:51:44:e3:76:e2:61:d7:6a:3e:b9:a4:79:72:b3:07:c4:7d:
6b:21:97:81:cf:ef:1f:99:e1:c9:52:d1:52:68:96:04:15:4c:
35:26:52:d1:ea:08:bf:a9:c6:93:b2:29:f2:e5:0f:b1:1b:be:
ce:9a:34:e3:4b:c6:c9:b5:da:a1:d1:07:d2:de:37:3d:6b:6f:
a6:c3:05:b9:96:83:8a:93:f1:03:e0:68:a4:c6:da:a9:51:33:
4b:bb:9f:5a:e8:4f:c0:39:4b:b0:d0:e6:87:fc:ca:9f:4b:00:
c8:61:0c:8e:e3:ba:5c:1c:fe:8d:0d:fa:e4:d7:cb:3a:cb:7e:
45:22:6e:e0:46:66:92:c9:bd:1f:6d:84:9f:6b:e3:88:38:38:
bc:2e:5c:d1:da:17:20:a4:db:b4:a7:73:2c:78:01:fa:63:0b:
48:13:06:2b:da:55:7b:e5:55:6b:f9:75:78:af:f6:80:52:4f:
99:e4:ec:cd:fc:57:3d:4a:49:51:0a:6e:1d:d5:b6:b8:32:f8:
27:46:3a:b7:26:be:74:42:73:a5:29:5e:38:0e:36:89:51:e4:
2c:2a:29:a6:fa:96:27:01:e2:fe:07:b4:ce:8f:60:f0:a6:b2:
a0:39:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:15:20 2025 by rpki-client