Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d971a8f7-52f6-350a-ba82-6330fc01bc76.roa
File: d971a8f7-52f6-350a-ba82-6330fc01bc76.roa (raw, json)
Hash identifier: tjfqypkn3PRXYTGUYqQnp1wSFhJHz0UF44MvMdHZlvk=
Subject key identifier: A3:74:A1:9B:82:A5:C2:51:61:58:E5:A8:98:65:E9:D4:75:AF:28:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1194F7DC98E8A1677C4800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d971a8f7-52f6-350a-ba82-6330fc01bc76.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.170.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:94:f7:dc:98:e8:a1:67:7c:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=db3ea376-a5cc-4718-a6ae-b411ed1c4244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:93:61:f9:34:8f:94:d7:a6:1a:34:34:5e:
2b:79:cb:84:79:9a:c4:4b:69:90:05:12:d0:40:e0:
06:5e:af:07:03:33:83:ee:ab:5a:b8:38:13:ab:7b:
bf:78:1c:83:11:38:aa:c7:af:9f:7c:9a:ed:5a:4c:
e1:76:3b:83:33:66:a4:a2:17:4a:c4:c1:6b:e5:f4:
16:4f:36:77:16:56:8b:cd:80:02:f8:9e:f9:c6:7e:
a3:d8:04:c0:31:b6:a5:40:9c:67:60:a9:46:30:cc:
56:26:bc:6c:a9:3c:63:0e:e2:b9:53:1f:aa:5a:27:
c4:c6:65:6b:5e:bf:f9:eb:6b:27:c3:9b:c7:2b:e8:
32:89:d5:10:fa:7b:83:a5:61:53:9b:04:28:42:38:
1e:5e:9f:05:2e:f0:cb:37:a1:bd:bd:35:fb:ab:66:
1d:37:4d:f8:e4:ff:c8:2c:5a:72:42:73:af:92:d2:
ee:eb:e8:fe:a7:e2:58:8e:40:91:6e:ba:b6:7b:34:
4d:f2:28:57:43:0e:83:05:90:1b:e2:d6:71:04:2e:
57:e1:5b:94:42:51:8b:15:6a:58:16:50:26:67:85:
f5:d2:1b:61:6a:40:c8:d6:69:fa:29:5c:ab:20:a2:
d8:25:f7:11:30:a3:09:c5:4c:13:98:b1:ba:34:27:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:A1:9B:82:A5:C2:51:61:58:E5:A8:98:65:E9:D4:75:AF:28:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d971a8f7-52f6-350a-ba82-6330fc01bc76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:fd:77:5a:de:fb:13:aa:10:84:e0:50:77:a0:27:09:40:87:
31:58:07:24:60:2e:c7:a2:30:dd:09:f1:14:f6:a3:00:65:bc:
86:23:65:64:7a:65:09:df:04:21:7e:73:88:b6:7c:89:03:2d:
ab:ef:ac:30:a6:02:f7:9d:b9:7c:62:e2:75:df:d6:af:3e:3e:
22:e5:ee:4f:e5:96:cb:b2:10:c9:08:66:fa:9d:a7:03:d5:bf:
3a:9b:81:5c:e2:18:c2:9b:92:98:2e:df:c3:53:77:c4:02:c3:
d2:b8:e6:4a:20:ec:2b:3d:19:51:19:5a:47:98:35:31:1b:95:
fd:8f:b8:5d:9d:91:b3:b0:4b:ff:c8:31:65:b8:e7:9c:7a:3b:
46:7c:34:5e:17:d3:11:a5:15:7c:e9:c6:64:25:e5:d8:ca:1c:
8e:e9:85:88:27:14:7f:66:ca:06:8c:c8:62:38:2f:a4:47:5b:
32:12:fd:d4:9d:17:a1:4f:ea:60:fe:90:e3:64:05:8f:02:be:
b8:77:8b:59:16:3a:e1:b2:dc:ae:88:3a:ef:1d:f7:b0:64:14:
f1:f2:3e:39:e8:6f:f5:b8:30:a2:ba:dd:cb:8f:c4:e6:1f:c4:
23:c6:7e:d4:7d:76:a1:25:a2:d9:ff:e8:0a:10:64:14:1a:06:
42:75:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:49 2025 by rpki-client