Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbb9de8d-9c0f-3cae-9b51-1a47b8953d22.roa
File: bbb9de8d-9c0f-3cae-9b51-1a47b8953d22.roa (raw, json)
Hash identifier: 87Wxbis4e6BJMAlCDNBVy2L4sCNFonHyx/srnGLw8Ow=
Subject key identifier: 36:11:79:F8:5B:E5:CC:6B:F3:84:0B:1F:B3:35:C9:37:E0:61:5B:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FD7E1D9CAE74F72B37600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbb9de8d-9c0f-3cae-9b51-1a47b8953d22.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.155.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:d7:e1:d9:ca:e7:4f:72:b3:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=35ab7113-e5d4-4df3-a370-67ada3089f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:2c:1e:1c:b2:bf:47:20:9d:63:98:b3:75:
f2:28:b3:54:8f:0f:db:6e:07:55:da:be:33:82:17:
d4:db:80:27:cf:eb:cc:a5:9a:50:76:13:74:83:cb:
72:8f:50:09:5b:e5:b6:48:16:1b:b3:b8:f7:0f:ef:
55:bf:91:6b:39:74:9b:0e:75:1a:c2:39:80:5e:f1:
86:46:e5:74:85:68:ab:95:bb:20:b0:ef:d1:8c:36:
d3:ad:91:98:9f:e2:9d:5f:8d:29:ff:57:74:72:f7:
15:20:87:39:9d:2f:ce:7a:0b:6f:23:34:8a:d1:cd:
db:81:8a:1b:7d:27:90:6b:8b:c4:87:79:3d:8b:27:
97:4b:92:cb:7a:ed:a0:83:e5:cf:4e:82:b5:97:dc:
2e:8d:fb:7a:a2:ce:b7:73:8a:4a:90:b6:8f:65:f2:
6a:18:b6:c8:7a:cc:fd:5d:82:52:69:a3:9e:ac:37:
e7:8c:10:e8:e1:a2:01:d5:94:5b:a2:81:45:03:99:
e9:ce:57:e0:e2:fa:c8:f2:22:bf:96:e7:5e:59:bf:
a2:4b:4c:87:26:13:e0:87:af:3d:46:6e:c7:4b:60:
40:90:13:6c:d7:eb:72:00:77:ce:4b:e8:bc:92:58:
1e:16:29:3c:20:f0:13:c2:ce:51:29:42:dd:b7:7e:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:79:F8:5B:E5:CC:6B:F3:84:0B:1F:B3:35:C9:37:E0:61:5B:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbb9de8d-9c0f-3cae-9b51-1a47b8953d22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.155.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:92:d2:fd:ee:2f:6f:83:a2:f3:99:d5:51:44:1c:7f:ea:89:
a4:d5:e2:99:1c:8c:94:1a:4e:f7:d3:a0:2a:47:29:d0:37:75:
a3:56:fc:24:9e:5e:54:2c:a2:81:79:64:69:be:02:e1:7e:67:
d9:50:e2:93:e5:8f:c5:6f:8b:ed:0b:7b:bf:66:81:9e:87:85:
62:51:23:df:56:f1:93:67:10:d0:e3:af:16:13:8c:e6:0d:37:
c5:74:52:26:6b:06:9b:ef:7d:c8:5a:2e:9c:7a:fc:c1:59:51:
bb:d9:bb:1b:19:3d:93:55:03:27:e5:66:94:75:eb:0e:e8:b1:
14:dd:14:11:ee:bc:f0:3f:c0:58:37:f1:2a:f6:32:09:4e:8b:
aa:69:e9:c7:98:79:1f:a9:bc:97:7c:15:02:72:07:da:45:92:
e3:99:b1:6d:81:d0:4f:2d:4d:87:d4:03:e6:00:98:74:0f:0a:
68:6e:25:c0:dd:66:0f:24:40:20:66:db:96:26:6c:bc:53:e7:
7e:a6:5e:30:62:9d:b4:31:ec:83:b5:c7:d0:ae:12:1b:9a:a3:
20:ab:60:89:b2:95:34:46:24:34:2d:d7:d6:60:f6:77:41:fb:
0a:ef:58:55:97:3b:d6:e9:c1:53:87:3d:45:28:dc:02:c5:38:
68:15:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:10 2025 by rpki-client