Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2eadd4a-a192-383d-b361-7ff1a8aa1656.roa
File: d2eadd4a-a192-383d-b361-7ff1a8aa1656.roa (raw, json)
Hash identifier: 5s8vuJAEKWh4gd75mIc0/Bl3avAa1GAKbLTKnPG4BsE=
Subject key identifier: 59:E4:01:77:7B:42:6D:7B:46:E5:42:AF:6E:16:4F:74:45:4D:1D:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C110D5C4889094D66D04980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2eadd4a-a192-383d-b361-7ff1a8aa1656.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.211.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:0d:5c:48:89:09:4d:66:d0:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3bce86d0-7fdc-4210-a1bf-bad9823760db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:ce:4c:5b:08:50:74:df:fa:a8:f6:6f:76:
7e:d1:d2:87:43:35:2d:21:de:89:96:0c:77:a3:d1:
d6:d2:78:a1:27:19:7d:74:3b:26:38:1a:f3:e5:0a:
5a:64:8d:a3:d7:bf:01:b0:3c:95:e2:6d:ac:a8:69:
df:aa:6b:9e:28:03:60:18:2b:b5:d5:57:9a:57:63:
31:e1:27:58:05:fb:d8:20:0c:52:e9:7f:3e:9a:f4:
72:c6:df:09:86:6c:62:00:1c:fe:57:b5:1e:12:7f:
89:4b:e3:7b:3d:63:82:74:31:f9:90:76:d6:55:d7:
be:fc:dd:e7:ba:71:61:61:21:4d:d1:f1:48:88:c5:
26:da:e9:62:7a:71:f4:ff:1a:d9:3f:03:57:85:60:
70:f0:88:ab:b9:b0:1d:38:49:7f:b4:0a:d0:b5:35:
bd:48:4f:39:6e:e7:a3:80:3e:8d:80:38:25:a9:6a:
80:aa:f6:d7:b9:7a:58:5e:e8:ce:5b:80:6d:dc:25:
e5:59:f4:5a:9b:24:df:3c:2e:22:78:ec:d8:a0:30:
94:8a:1d:2d:9d:8c:d8:82:3f:dd:80:6b:e8:41:1f:
0b:ec:67:1f:1f:21:1b:dc:e8:f5:f4:4a:4a:e4:e1:
b2:a0:74:68:7b:30:bc:3b:2c:a0:52:11:b5:3e:cf:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:01:77:7B:42:6D:7B:46:E5:42:AF:6E:16:4F:74:45:4D:1D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2eadd4a-a192-383d-b361-7ff1a8aa1656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.211.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:0d:ee:ac:42:79:31:4d:54:45:ff:f6:0f:cc:61:4b:a5:50:
a4:ae:f3:a1:74:ba:79:9c:a8:8c:c0:1a:61:8e:e1:8c:a7:62:
d9:7a:3f:22:09:6e:c8:f4:db:80:9a:48:79:73:a3:97:30:63:
df:33:88:fa:b1:d0:5b:27:6b:59:82:f9:44:0c:26:e3:6a:ea:
f1:0b:77:80:5b:80:ef:be:99:00:b7:5b:cd:9d:9a:96:08:2e:
fa:44:22:de:23:6c:58:c4:c8:29:71:94:74:5f:f2:07:72:65:
21:b3:a0:64:8c:32:58:cc:0b:8e:36:73:6e:f3:be:dc:c7:6d:
53:da:c6:b6:a3:c0:ed:fa:fc:96:d7:dc:ae:31:9d:dc:8d:b9:
d0:1d:ff:97:46:b3:8a:e4:72:66:77:dc:4b:56:d9:83:67:00:
11:79:bf:a7:7a:d3:83:c4:4a:e6:3c:33:07:dc:3f:50:7d:27:
c2:14:8c:95:e5:c2:98:36:f7:5c:c7:e1:67:59:d4:6d:1c:48:
dd:5d:20:94:a9:26:a7:96:e8:ba:1e:ce:b0:ce:c6:63:21:e7:
44:c7:b6:a6:ca:01:90:a4:f5:be:67:e4:b4:82:3e:fe:cb:22:
36:96:37:c1:38:8f:b2:f6:b2:8e:3e:67:dd:17:35:8a:08:f8:
c0:24:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:54 2025 by rpki-client