Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d3411c-7b3a-36d2-9aa7-b11be84657fe.roa
File: e3d3411c-7b3a-36d2-9aa7-b11be84657fe.roa (raw, json)
Hash identifier: 38ZA+GTfDtxWu2YLIUMG3jdnSTf7YdJ6wIYKKYAyxhk=
Subject key identifier: 14:2F:30:58:36:41:14:D5:DE:ED:2E:00:B6:0D:34:0C:45:A7:28:2E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E3A22DECB89CDE43311A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d3411c-7b3a-36d2-9aa7-b11be84657fe.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.218.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:3a:22:de:cb:89:cd:e4:33:11:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=57d9552d-38b1-449c-86d5-4a961b755f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:49:4f:5f:50:41:03:b9:0f:a4:f7:8f:50:
55:03:f5:ef:9b:c5:c7:2c:ef:c0:c0:37:26:9f:15:
1e:fe:ca:b5:15:e4:d1:04:60:0d:7d:6f:d3:32:54:
c6:b3:2a:37:a1:ed:59:09:73:00:a6:98:73:06:ac:
d4:3d:1e:63:f0:94:81:8a:56:fd:44:7e:dc:a6:9b:
cc:e9:0c:e6:c7:26:e0:e8:f5:5c:56:0b:ca:bd:45:
d4:b6:0a:63:53:76:10:95:0a:9b:91:8f:69:05:69:
2b:03:ed:1a:0c:27:8c:ab:97:5d:95:31:9d:43:d8:
33:75:82:9c:9d:38:73:bd:45:66:52:7f:d7:76:00:
24:28:6c:01:c2:9d:c0:ea:f5:40:2a:c9:11:a2:91:
e1:11:94:9c:b7:04:61:32:49:3f:11:44:40:37:0a:
a5:52:4f:e5:a5:a9:db:6d:d8:2a:7f:40:4e:ee:95:
37:af:70:48:65:af:5c:77:64:b2:77:cf:2b:49:37:
04:d0:2b:06:8e:2c:c2:4a:49:ef:7c:d6:b4:90:d5:
fc:3e:6a:27:c2:ad:21:34:c7:7c:53:2e:d8:5e:c0:
49:24:3a:28:0d:29:b4:a4:87:6a:10:68:e9:2d:71:
30:aa:5d:db:53:27:1f:e0:3d:50:2d:8e:6f:27:f7:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2F:30:58:36:41:14:D5:DE:ED:2E:00:B6:0D:34:0C:45:A7:28:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d3411c-7b3a-36d2-9aa7-b11be84657fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.218.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:2e:73:9b:9e:76:5f:2e:f1:0f:4f:0b:b3:01:9d:af:ed:9a:
17:fb:dc:07:16:39:c8:64:31:ef:d5:7d:cc:01:57:40:05:4b:
bc:67:1e:62:13:bd:4e:f3:94:0a:a6:7b:f5:0c:7a:c0:11:17:
a1:d4:5f:42:d5:de:42:c2:a8:d0:ac:79:7f:e2:ee:08:21:c5:
bb:d8:fe:c2:83:51:de:e7:09:9d:67:95:b6:5c:7c:65:0c:93:
50:67:69:a0:bc:30:b9:a8:7f:eb:eb:a4:fb:4f:1d:13:2e:4b:
ae:f9:71:8b:34:b6:74:bf:58:2e:b4:46:04:e3:a5:03:7f:58:
65:01:78:61:01:83:ba:cd:0b:c8:3d:48:e4:12:38:85:2b:93:
6b:d7:bd:2f:2a:27:81:5f:16:cd:c2:39:dd:23:20:e9:16:a0:
7a:f2:16:8d:06:4d:0b:1e:af:4c:51:f8:50:7b:07:ea:cd:f2:
1c:b3:d2:09:9f:b9:4f:e4:77:a2:70:6e:a3:e8:f0:b0:ab:44:
9f:99:02:d5:20:07:e6:8d:e4:84:77:bd:65:c3:09:74:b8:50:
98:01:58:ac:22:dc:62:f0:24:17:26:21:94:f7:f5:a1:29:09:
f2:b1:1f:2e:3b:ba:a3:b6:fc:ff:1e:49:4b:5b:b1:d8:cb:54:
a2:87:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:40 2025 by rpki-client