Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae28396-f162-31b1-90ba-f46cb0ee85cd.roa
File: cae28396-f162-31b1-90ba-f46cb0ee85cd.roa (raw, json)
Hash identifier: xaMxPx8jg8BebYebDGwfR9OdkujhrrjQB86b9Lnx9To=
Subject key identifier: 1C:A6:3F:7C:11:32:A2:22:3E:C0:C5:29:22:A7:3F:44:71:0C:5B:41
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12ACDAFD0A1FD410DF5020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae28396-f162-31b1-90ba-f46cb0ee85cd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.210.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ac:da:fd:0a:1f:d4:10:df:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=950af658-0656-4cdd-8bd5-7dd0a9f120fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:94:20:47:26:42:c4:0d:8b:74:bf:3b:dd:
a3:86:40:87:38:0f:50:c2:7b:5e:d5:f8:31:56:3a:
e8:01:f9:0b:8f:ef:a3:2c:34:ae:93:7f:0d:e5:34:
3b:ba:fd:fe:ff:08:92:65:d8:f7:17:93:6c:90:76:
38:25:f9:d7:04:2a:3e:82:5b:d8:81:8a:d6:e2:74:
61:00:0e:4e:1b:f1:b6:71:67:46:0f:a3:7a:06:eb:
a9:a5:87:d2:67:1e:0d:8d:db:d3:c4:71:fe:da:bd:
97:8d:c9:da:5f:b3:01:f5:90:29:a1:3a:50:66:32:
51:1f:d2:77:4d:82:8a:8c:60:f0:a2:d6:9a:80:80:
a3:68:e9:d4:4c:c4:24:5f:6f:11:b0:c1:5a:31:11:
c7:3e:17:92:7c:c1:27:6a:47:57:d7:15:db:c0:0f:
b3:d8:94:5e:3d:20:21:29:82:4c:3b:7b:b3:82:c5:
2c:ce:bb:e2:4f:e6:80:cf:e1:fd:4c:29:71:63:94:
6a:1c:23:7b:69:dd:65:b3:24:64:11:79:5c:5a:a1:
89:62:f7:b7:cd:06:d4:71:94:da:29:ba:a1:23:35:
2d:f5:fc:f9:a5:d4:50:e2:d0:4c:9f:e1:61:ee:9d:
66:f0:dc:e5:27:f0:e4:80:21:22:24:0e:a6:71:0d:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:3F:7C:11:32:A2:22:3E:C0:C5:29:22:A7:3F:44:71:0C:5B:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cae28396-f162-31b1-90ba-f46cb0ee85cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.210.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:cb:2d:b1:a2:16:4c:04:b9:3e:1b:77:51:bf:83:c3:ef:93:
89:d7:65:64:11:f6:0d:79:d6:df:f4:1a:58:ad:d7:87:31:68:
06:59:5b:e4:c8:a9:48:44:74:f8:64:bd:8f:c8:39:da:a8:b7:
b4:a2:b0:c8:58:61:71:5b:0e:60:1c:25:8d:db:34:8f:ca:73:
5b:ba:c0:ab:71:79:b4:b4:28:91:26:8c:4b:01:c3:45:bb:6b:
55:bb:2c:d9:2a:7d:2d:4f:d3:7f:d3:38:fb:ef:19:58:f1:39:
e8:e0:c9:72:9c:ca:5a:15:4b:fb:03:47:30:82:92:11:64:1b:
cc:b4:a9:9a:0d:dd:3c:ea:4f:ed:c9:dc:75:9f:db:6c:7f:d0:
10:5f:e1:a9:38:8f:f4:73:d8:d6:1c:1c:19:7d:33:92:aa:6c:
f7:dd:33:da:dc:4f:4b:dd:ed:81:5b:8e:72:04:1d:cf:59:e9:
5c:10:7b:21:36:59:e3:72:db:a0:82:9a:cd:b8:5f:b2:bf:0f:
7f:6e:18:8e:a5:d3:0c:03:2b:4b:97:5f:b7:b1:31:1a:26:c8:
e4:cc:44:0d:a6:ba:ec:bd:c8:89:ff:09:9a:73:06:50:72:a3:
06:10:db:8a:31:2c:a4:bf:24:f8:91:ab:13:60:f4:42:aa:2b:
1f:62:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:28 2025 by rpki-client