Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c78b83f3-f1e2-3edd-95b4-88204ae8c1ef.roa
File: c78b83f3-f1e2-3edd-95b4-88204ae8c1ef.roa (raw, json)
Hash identifier: gdi8gx6kaHkIt9QUwBW+4bEy74Ufu7+DImwyWWprW9s=
Subject key identifier: BB:FB:87:B9:EE:FB:C9:2E:BC:36:CE:B4:EA:D4:11:D5:45:A4:D9:86
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C118FB0F660F32B23239E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c78b83f3-f1e2-3edd-95b4-88204ae8c1ef.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.158.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:8f:b0:f6:60:f3:2b:23:23:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=84ec2be3-6b6e-4401-9868-4383a06654d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:5f:5c:17:58:90:43:91:e9:ab:32:34:43:
d1:33:a6:e3:97:0d:5a:cb:58:53:01:5d:53:9c:19:
62:f7:7b:1d:07:64:e2:a6:d9:3b:6a:ff:e9:2c:2b:
d1:c0:73:0c:fb:da:f3:0e:2f:de:3f:73:50:07:71:
f3:76:80:5f:ac:f1:23:bc:52:50:0d:05:7f:62:fa:
40:e2:49:ee:d1:25:d7:10:b7:13:1c:35:32:ef:66:
26:c9:18:a1:26:8b:e9:a8:e8:22:70:41:a8:b7:88:
0d:83:46:4c:54:61:2f:c1:0a:6b:9a:e0:cc:91:34:
c5:cf:ce:44:65:83:68:92:ba:74:83:78:eb:8f:84:
5c:29:c8:a5:2f:ec:8d:89:94:b2:c3:3a:d2:7c:a8:
9f:65:75:5f:3e:6e:00:46:ff:5f:42:a6:3c:e1:c3:
ae:5b:68:b2:e4:a6:6d:84:26:6d:13:93:1e:c7:79:
7e:80:61:9f:e2:05:8f:82:da:11:85:9e:6d:b6:bc:
3a:48:57:b2:87:27:b5:36:e2:13:6c:a3:e3:e2:1f:
04:88:7a:d9:60:42:64:71:d2:75:58:53:eb:85:99:
26:68:91:ef:41:5b:ad:0c:1c:15:0c:5e:6f:6d:17:
2f:e0:df:4b:e2:e8:87:1e:d3:72:e5:43:a4:d9:8f:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:87:B9:EE:FB:C9:2E:BC:36:CE:B4:EA:D4:11:D5:45:A4:D9:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c78b83f3-f1e2-3edd-95b4-88204ae8c1ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:f5:7f:24:c3:c4:e4:88:7f:26:3b:55:21:68:07:48:52:53:
21:51:73:cf:69:2d:5a:b2:9d:2b:24:b1:63:cf:44:db:da:df:
fa:93:00:09:dd:57:ca:b7:32:2a:6a:1a:21:2c:68:81:bd:d5:
d3:97:38:15:f3:5a:0d:e5:9a:c9:3d:96:34:ef:e2:6f:49:23:
69:8f:95:3f:45:34:29:ac:f1:0b:35:51:63:a5:61:37:de:cd:
04:80:87:f5:81:a7:9c:6e:55:69:66:00:db:5d:f8:b1:5a:6c:
63:80:5d:4e:af:c3:a8:d7:e0:94:31:45:fa:90:2f:a4:78:57:
7a:f0:60:0e:47:47:ae:24:bb:34:82:e6:35:1a:c7:b5:35:af:
c2:0c:48:b4:6e:1a:e2:68:aa:3c:d3:5f:15:2c:a2:8e:0c:de:
b2:f2:d0:e6:c8:69:f9:82:6d:b0:e0:86:c3:4e:75:ef:76:8f:
fc:d9:0a:22:3d:14:38:e8:9a:bd:78:b7:11:57:ca:71:4b:b0:
20:00:a0:ae:b4:74:5d:e9:f3:c3:2d:e2:78:93:69:ab:b6:20:
14:0c:4f:c0:cf:c3:69:6b:27:ce:8f:61:9d:cb:3a:e5:df:d4:
1b:9c:53:a3:75:f4:c5:36:27:56:b6:06:6c:66:6b:c1:9c:ea:
48:fb:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:27 2025 by rpki-client