Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9956b4f-e793-3f9d-af20-3df6f4a907ab.roa
File: c9956b4f-e793-3f9d-af20-3df6f4a907ab.roa (raw, json)
Hash identifier: Qv+x4QUQuTN9QF1tlhcPMxSaCOFdHNfMFTJG2S9G9js=
Subject key identifier: 36:8E:C0:B9:69:C0:17:F1:43:DE:52:6F:7C:58:EA:EB:4D:F9:AD:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1213A34753334AEBCDB900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9956b4f-e793-3f9d-af20-3df6f4a907ab.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.215.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:13:a3:47:53:33:4a:eb:cd:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=02c13c8d-27f4-459c-8831-bc4029256337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:2f:c9:cc:f9:58:3d:86:51:67:21:23:14:
cf:24:e2:15:ed:83:78:f1:7c:62:c6:1a:dc:e2:c0:
7e:9b:23:28:82:95:f2:35:e6:50:f7:5e:1f:e9:f1:
8f:17:c5:b7:3a:76:b0:64:5f:cf:67:d1:da:fc:f7:
50:24:ce:f4:c3:10:81:5a:84:23:9d:e6:fc:8d:e4:
89:cc:f9:33:96:5e:0f:37:5f:e0:3e:40:aa:09:8a:
05:e1:c2:47:33:4c:a4:5c:c2:68:90:cd:15:01:b0:
15:3e:34:08:65:48:4f:cc:ee:b5:07:9c:03:1f:71:
84:6b:90:e1:4c:01:20:3f:cd:62:61:bb:e2:4a:d7:
ea:3d:5b:2f:16:09:57:73:07:67:08:5a:0c:ee:f6:
7c:64:37:ad:dc:3b:88:4b:29:cd:01:13:33:6b:d3:
a5:a6:07:ee:57:52:a4:1d:56:e9:42:92:60:e4:d5:
9a:8f:6f:43:9e:86:7f:91:ef:3c:f8:2b:b4:5d:a3:
7f:d9:77:7f:ba:89:22:94:9b:04:ff:52:47:15:f7:
2e:e0:bf:3e:65:d2:57:4b:53:fa:62:a9:56:32:d7:
17:a5:cf:d6:6a:77:f8:7c:f4:1a:21:e4:c5:99:3c:
d6:1c:66:9f:b4:32:39:2b:de:e4:64:fb:64:0b:6d:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:C0:B9:69:C0:17:F1:43:DE:52:6F:7C:58:EA:EB:4D:F9:AD:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9956b4f-e793-3f9d-af20-3df6f4a907ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.215.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:43:ff:df:a1:3d:6e:6e:ed:bf:d1:ed:c5:6c:bb:bd:c0:97:
3b:73:3a:38:50:df:77:26:60:e9:90:ee:6b:a8:fc:38:a3:84:
66:02:df:3a:b9:fa:84:50:dd:30:7f:37:e3:84:61:5f:ed:0b:
5b:ac:ca:40:7c:26:06:58:e8:23:07:16:63:e6:5c:25:90:b6:
75:e8:04:ed:48:45:4d:ce:97:10:63:c8:9e:09:25:5e:5d:d0:
5e:32:e4:33:9d:3d:3b:80:4f:20:a4:b1:8e:f6:0e:2d:c3:de:
54:92:0c:dd:66:49:10:5a:e9:d6:d9:ff:9c:f7:1d:13:c8:a2:
7b:5b:ba:f2:14:38:0a:60:a3:ec:d4:a3:f9:94:df:d8:18:41:
38:78:43:24:eb:16:5b:47:b9:05:53:6d:b6:07:50:43:df:dc:
a1:e3:0b:7e:12:8e:bf:9a:62:dc:03:3f:4e:82:d9:e4:6f:46:
62:d3:c5:3c:a8:cf:e5:09:a1:4c:18:f1:2e:c4:10:47:9e:7d:
8c:62:2e:72:9f:85:8b:47:a7:02:46:d1:5d:5c:a2:99:34:81:
01:9a:2a:c6:8a:55:b2:39:80:5d:f8:b2:03:65:13:99:70:1a:
0a:4e:27:18:c3:e5:48:ce:9b:0a:93:a4:f3:52:a7:de:4f:46:
87:99:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:27:02 2025 by rpki-client