Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa
File: e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa (raw, json)
Hash identifier: aeu8/27hs2mdtfqwo0MZwqxOM89vHjz/uO8MSYN5f2A=
Subject key identifier: A5:53:F6:95:6D:1A:52:05:FF:CB:D9:9F:01:D8:32:62:B5:62:F7:91
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D3A9ED339C5AB6B844B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.240.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:3a:9e:d3:39:c5:ab:6b:84:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=083d2251-2798-4171-bc94-cfed11de2c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:51:53:7a:41:d4:66:8f:c9:d3:41:9a:48:
d6:ab:4d:ea:85:af:b9:83:75:f3:82:5c:74:5d:ba:
42:c7:ad:56:c0:f5:1b:83:f3:7a:31:d3:8b:5e:2c:
ec:c4:70:24:41:2c:45:aa:25:aa:b7:36:b4:32:74:
a5:45:55:96:6f:5d:a8:78:e1:8c:1d:0a:4b:93:42:
67:43:3c:e0:b8:09:fd:f8:e7:1b:2d:29:cc:01:93:
d1:f5:e0:b6:a6:54:ac:02:e6:28:50:50:c2:77:71:
d5:51:36:48:09:29:3e:27:15:f6:fe:b3:2c:36:86:
e1:26:16:79:db:ea:a3:84:24:8a:1b:21:94:80:cf:
41:1b:26:6e:24:d7:70:c2:bb:2e:14:94:e2:1c:18:
3e:0b:5a:d9:a9:09:d4:6e:a1:6f:16:49:49:be:a9:
df:ee:84:88:90:6f:30:71:ae:b4:f8:a4:ac:d8:f6:
f7:3f:64:76:e0:e8:bf:fa:fa:70:c5:b1:ff:ac:27:
12:c1:4d:52:55:29:f4:c9:50:f5:8e:97:4d:aa:61:
70:9b:19:5d:a2:f2:b7:68:d6:42:07:73:cb:d3:17:
c6:44:34:f9:b7:53:6d:ee:f8:1b:7e:b0:9b:b9:a6:
63:e8:bd:42:ef:6f:a9:39:e8:73:ad:3b:13:de:e4:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:F6:95:6D:1A:52:05:FF:CB:D9:9F:01:D8:32:62:B5:62:F7:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f9c172-963b-3acf-a3aa-30c2c7ae2636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.240.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:02:03:6c:0a:a0:70:20:51:7a:65:64:71:1f:92:ee:0f:64:
d9:19:b1:6a:05:c0:ab:34:0e:b4:e0:12:c1:74:2b:24:01:c6:
4e:08:49:0c:4b:79:95:9e:cf:7d:6c:26:47:40:ec:00:95:f7:
2b:8c:f2:14:bb:a3:9b:eb:71:09:e0:c4:97:72:b3:22:c1:7c:
a5:ab:94:1f:ee:88:74:07:bd:15:cc:46:1b:5c:87:22:9d:3a:
28:c9:dd:45:bd:26:de:e6:89:d0:f4:0a:80:f5:bb:50:9e:e4:
77:9c:3d:96:7f:bc:62:0d:72:4a:39:9d:0f:eb:eb:33:71:09:
ff:cc:e7:e1:57:ac:c4:ec:a7:7b:57:bc:4e:07:12:4f:ab:7c:
95:75:b7:51:4d:17:0f:38:af:87:2b:8a:01:36:b1:d9:69:96:
22:af:12:02:8f:8e:f8:7d:43:52:f0:4a:65:da:b4:31:65:3b:
8e:1e:cd:e5:82:f9:35:f3:10:4e:17:46:b4:bd:7b:44:2a:f8:
dd:bd:53:15:99:cb:55:e6:2c:c3:37:11:aa:1d:86:9e:0f:a3:
40:2e:13:da:04:6d:0f:0e:3f:b8:43:b1:20:28:76:c5:64:cf:
cd:48:b6:bf:8e:db:6f:2e:44:b5:0e:09:5f:31:24:76:a3:48:
51:a2:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:34 2025 by rpki-client