Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d451b546-fa21-3564-a6cb-a45f1bafa969.roa
File: d451b546-fa21-3564-a6cb-a45f1bafa969.roa (raw, json)
Hash identifier: 70z/kT4Qo+LSKujxMYYDqnf2V2RQIaKXD1wMU6jcX0I=
Subject key identifier: D6:40:F5:19:51:D9:1D:D5:0C:DB:FB:F6:8D:14:76:20:85:9C:9B:68
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B08A9AAEE725E5C666500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d451b546-fa21-3564-a6cb-a45f1bafa969.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.218.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:08:a9:aa:ee:72:5e:5c:66:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b2b7884c-df3a-4828-83d5-1d51d9e9891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:cc:91:1f:51:f1:77:cb:e0:be:23:97:7a:
2c:7b:9e:67:e8:ea:34:5f:e6:13:33:68:97:4a:a1:
28:b6:dc:17:cb:fa:1e:81:c9:48:27:4b:3c:40:ef:
3c:46:9b:8f:90:42:d9:d9:bd:98:74:8c:d9:30:c2:
04:22:e1:d6:19:60:3b:5f:7a:ab:b1:35:47:d4:dc:
a8:3c:21:4d:76:e9:7f:f3:a0:f1:b6:ca:60:84:d7:
58:08:35:06:a4:1e:16:2e:2d:15:8d:ba:f4:19:dc:
87:ef:6d:0e:82:d4:4a:ac:01:82:b9:b1:9e:cf:71:
c4:1a:b5:33:5e:84:4b:54:84:a1:a6:10:d0:9f:c3:
2f:5e:49:d5:f8:20:0a:2c:7b:6b:fc:3e:73:ff:f9:
64:0e:ba:a6:ae:9f:bb:5a:cd:48:62:f0:79:27:63:
16:f5:1e:92:f7:fd:64:a6:46:f8:7a:b3:3b:87:10:
1f:83:fa:4b:4b:16:0d:56:99:64:e7:bf:14:85:ff:
45:67:2c:95:e3:c9:2a:46:4c:8d:e5:7c:d4:65:27:
f8:ce:6e:c0:ca:35:b3:42:b4:fa:87:d3:6c:01:62:
b3:57:50:2d:d4:57:b0:f2:55:96:6c:6e:48:23:4e:
f4:c4:9b:57:e2:91:12:83:ec:2e:65:38:1a:58:f7:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:40:F5:19:51:D9:1D:D5:0C:DB:FB:F6:8D:14:76:20:85:9C:9B:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d451b546-fa21-3564-a6cb-a45f1bafa969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.218.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:64:d7:99:49:5b:72:12:72:30:5a:2f:6d:c7:54:be:94:8b:
e0:3e:93:d0:6b:9f:b4:48:21:01:78:07:98:e2:57:d2:b1:9c:
da:0b:17:56:61:47:b8:92:a4:72:69:90:d4:75:0c:5b:ed:34:
00:4c:6d:06:2d:65:6d:32:93:dd:68:20:41:9b:fc:87:47:e9:
06:f7:a8:24:6e:0e:b8:7b:a4:6d:cf:78:50:96:4a:20:8d:a9:
ee:f2:62:21:39:3a:83:43:17:7b:77:63:e4:6e:28:06:1a:b7:
b8:be:63:99:34:52:4e:a3:32:cd:25:eb:4f:bf:e1:4b:9c:2b:
43:35:dc:18:5f:a6:85:33:43:1b:b4:c5:a8:55:8e:06:6e:62:
46:50:ba:92:b0:7c:fc:54:29:0e:c5:e5:f2:7f:72:6d:24:62:
8e:57:c5:60:55:32:f3:8e:c4:21:0e:a9:c0:6e:2f:13:9f:4f:
b3:13:55:97:c5:41:ad:c8:01:c6:79:82:df:52:55:98:4c:0d:
de:72:51:9a:5c:15:47:37:bf:d1:da:c5:99:82:f0:a2:8e:b5:
21:92:e2:49:5b:87:39:11:0d:17:48:43:50:5d:e7:86:d2:6e:
c2:8d:54:b9:cc:a7:e9:e3:c4:29:39:75:72:49:73:38:4f:71:
4e:f6:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:08 2025 by rpki-client