Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de0029bf-f3e4-36b3-82e3-9fa640830988.roa
File: de0029bf-f3e4-36b3-82e3-9fa640830988.roa (raw, json)
Hash identifier: bBmbI4cvcpydzdpOjzZXh1KQ+uOh/+6RMkdV1Ks+vig=
Subject key identifier: D1:9D:70:BC:A9:E0:11:52:B7:5A:F5:6A:D8:37:97:43:B8:15:8A:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12159012E3A6A9F88D1F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de0029bf-f3e4-36b3-82e3-9fa640830988.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.226.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:15:90:12:e3:a6:a9:f8:8d:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8decff5d-51d8-40ec-8ad6-b83c861e3fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:27:b1:67:e7:3b:21:67:04:17:d5:9d:b8:
55:fe:d4:18:37:c0:d8:0c:54:91:af:80:d7:0e:9d:
9d:49:00:4d:60:28:31:12:55:f8:24:96:a5:0f:e0:
26:34:2f:dc:ab:a3:9f:97:7c:99:56:df:dc:18:c2:
2c:08:fd:a3:fa:2e:90:a6:80:7f:2d:8a:19:cc:53:
5f:d4:4c:2f:c0:6d:cf:b7:b3:a3:c3:0e:59:59:16:
4b:cd:41:ca:b4:2d:cc:88:27:1a:72:72:27:27:9f:
14:74:3e:cc:a4:63:9a:25:91:c0:a6:41:b1:5d:a1:
c1:43:d4:4f:1e:dd:ce:42:67:d4:fc:b2:ee:e7:b7:
0f:07:8d:19:90:35:7b:de:bd:64:5c:8c:44:c6:95:
03:14:cf:36:05:db:5f:cf:ca:16:55:d9:12:8e:5c:
9a:19:af:7f:d3:aa:29:2f:38:f7:ff:47:38:27:b2:
6c:14:c4:ee:b4:7e:26:d6:8b:6b:47:01:83:6d:01:
10:be:0d:b9:f4:88:e7:d6:e1:58:35:c6:6c:87:77:
b9:83:28:48:eb:0e:fb:0b:88:f9:a9:62:19:c0:96:
76:6e:37:5c:aa:4e:08:95:08:fa:e9:22:41:2a:c2:
f8:d9:a3:71:02:82:bb:a0:3f:6b:34:4d:f5:60:50:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:70:BC:A9:E0:11:52:B7:5A:F5:6A:D8:37:97:43:B8:15:8A:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de0029bf-f3e4-36b3-82e3-9fa640830988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.226.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:23:65:f1:20:69:c1:ac:fd:dc:da:bf:f1:e8:0a:80:67:31:
3c:16:3e:a3:98:41:b6:70:6c:bd:f4:80:54:14:8e:90:9a:a6:
49:dc:22:1a:8a:ac:8f:13:20:37:18:79:f4:a7:5a:ab:95:67:
27:e0:f9:16:23:da:15:75:3d:e1:5b:07:6a:ce:ee:5c:cc:41:
9e:bd:82:4e:1c:c3:9b:90:d1:71:d6:d8:cc:4e:36:52:7b:9f:
bf:96:42:3d:21:0d:25:ee:46:c2:d5:c4:3a:f8:00:b8:f0:ab:
dd:c1:e4:3a:ca:9d:2e:25:9b:8e:22:71:60:f9:b4:a2:50:5c:
17:e3:82:02:bf:4c:0b:e6:74:4c:45:ff:1e:85:52:08:3b:b4:
2c:81:99:27:2e:70:97:70:32:d2:00:42:52:a0:b1:1d:6e:ce:
a0:36:33:ee:2b:f3:72:87:56:5a:6b:c8:94:82:3e:b5:a5:e9:
3a:61:2f:3d:71:fa:7e:df:36:a1:04:3b:fc:5b:ed:ed:4e:e8:
5b:fd:f4:23:b2:ad:9c:f1:a9:77:ae:19:d1:4e:13:79:95:2c:
c2:33:79:7f:84:e5:88:cf:80:fe:54:c6:1b:4d:98:e9:4c:a3:
b3:ac:c5:ae:50:78:95:ef:93:48:ff:88:10:8a:cf:31:b5:7e:
7a:02:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:17 2025 by rpki-client