Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b6ca40-2095-3875-a56d-4ab7092f563a.roa
File: d5b6ca40-2095-3875-a56d-4ab7092f563a.roa (raw, json)
Hash identifier: AJf8cBeUI8I3dnK1OXkkdO9ZAoZl6oyYWc78WlUoDfs=
Subject key identifier: D0:C5:41:CE:32:D1:D9:E3:A2:77:DC:35:96:C9:31:63:8A:63:4A:73
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12C36F68DDBCBB3B4E6280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b6ca40-2095-3875-a56d-4ab7092f563a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.45.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:c3:6f:68:dd:bc:bb:3b:4e:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b74b00bc-86c4-4643-bacb-bbafb5e9a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:c4:02:38:94:8b:86:61:de:ca:40:96:c2:
f1:3f:a7:08:ab:2d:c4:50:15:76:cc:93:f7:76:90:
29:cc:7c:a3:79:83:36:8b:30:d5:cd:a7:38:4b:bc:
ad:ea:c6:8a:14:be:4e:bb:48:75:6e:cb:fa:38:54:
cc:4c:67:0b:ec:2a:6a:a6:96:99:c7:c6:88:d8:66:
a8:67:af:4f:7f:4e:40:6f:fa:40:77:fa:09:6b:62:
1e:78:c3:7f:c6:8d:6c:fe:eb:84:9f:8b:16:75:8d:
2e:68:4b:d3:31:74:08:24:4c:20:23:16:0c:79:86:
bc:35:9e:cf:4c:16:19:c4:a9:9b:60:ea:ba:d0:19:
30:79:e0:61:52:c1:d1:6f:e7:cf:f8:90:99:de:d7:
be:bd:57:16:57:34:c5:ca:1d:58:e4:1b:29:9d:5a:
d5:c4:35:9f:0e:05:ce:65:c1:51:ee:2f:07:07:bd:
5b:e1:12:33:2e:3a:29:9b:2d:11:66:9d:db:7c:46:
2c:36:ff:cf:7c:8b:c3:5d:1f:94:32:b5:25:ba:2d:
c4:0f:a9:41:d4:97:55:c0:c2:d4:df:e3:10:be:0c:
e8:4d:9f:08:6d:9a:db:6a:bf:4a:27:5d:f7:fd:fd:
c3:f4:aa:1f:f9:41:b3:3d:ae:ae:b3:e9:6c:ec:70:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:41:CE:32:D1:D9:E3:A2:77:DC:35:96:C9:31:63:8A:63:4A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b6ca40-2095-3875-a56d-4ab7092f563a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.45.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:86:b6:83:a9:35:66:b2:1a:ae:18:5d:44:b1:da:c9:6a:05:
53:b5:48:33:05:fd:11:61:8a:64:58:9f:1d:5d:16:8b:a2:7d:
96:c7:8c:22:8b:03:83:5e:75:0c:d8:3c:6b:16:4c:f9:05:77:
00:f6:84:85:ea:46:c7:1e:ee:d8:74:2a:db:fd:1f:e0:dc:a5:
fe:f3:ef:16:3e:c7:a6:6e:35:00:cb:46:5d:32:ba:b2:17:d2:
3f:f4:9f:3f:fb:38:4b:04:a1:84:d2:b7:18:ca:2d:73:69:3d:
bc:6b:e6:92:d4:22:31:a9:67:e2:17:60:9a:72:98:fc:cb:82:
a3:85:51:c2:cf:f2:4f:be:40:7c:2d:28:26:ea:19:e9:b4:c9:
91:5a:4a:0d:47:2d:a5:bd:95:46:a3:15:ba:fe:32:71:c7:1f:
ad:2f:69:ab:fe:f5:f8:9b:75:09:28:65:3b:ce:54:5f:1a:76:
f2:b6:0c:37:67:22:d0:35:fd:ca:f5:fa:c8:d8:ed:50:8a:80:
bb:a7:35:63:9b:a6:e3:a7:0c:a0:e7:6e:3d:1f:85:80:fd:89:
bf:9e:da:73:64:56:0e:33:55:4d:95:7d:2c:4e:35:a1:f4:08:
c3:e9:08:e9:cd:00:29:58:6b:04:80:26:2a:9d:29:66:3d:53:
5b:dc:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:08:36 2025 by rpki-client