Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9740cf1-67c6-3309-af76-1b247f5dd5d3.roa
File: e9740cf1-67c6-3309-af76-1b247f5dd5d3.roa (raw, json)
Hash identifier: XupPcIqLaYpYQHV0iY9StDeyNn9O5Mhr9XIp8qkmuEU=
Subject key identifier: 20:76:52:93:26:9B:21:EB:1D:3F:1B:D3:E0:89:FA:3A:32:9A:36:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AF330C180A57AF27ED880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9740cf1-67c6-3309-af76-1b247f5dd5d3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.149.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:f3:30:c1:80:a5:7a:f2:7e:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3b4b68c2-f123-4e35-8185-8bf5997e4ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:46:0b:00:99:9c:e2:4e:79:5d:7f:6c:d2:
45:b8:f6:1c:ec:26:90:ad:e3:a8:fc:74:0e:1a:33:
32:a9:02:77:f2:fd:fa:6d:de:7d:90:b3:78:84:7a:
94:11:62:1c:f3:83:dc:64:41:1b:80:a0:6b:48:4d:
a1:da:c2:3a:10:8e:47:91:61:67:11:26:c1:f7:64:
be:a5:fc:f7:19:ec:07:c1:d6:0f:0e:18:81:35:cb:
a3:e7:0d:de:8f:a0:26:f9:83:d2:a2:b1:af:33:36:
9f:26:b2:0e:f5:28:c6:3c:e3:95:6e:a2:27:69:ff:
38:06:b5:97:5a:ca:df:88:54:00:d8:b6:0d:58:98:
48:cc:b0:74:48:e1:70:5a:eb:82:07:1f:03:e6:80:
41:15:c1:5c:b8:40:29:97:07:21:84:50:73:a7:6c:
b4:f6:bf:64:d7:8d:78:5c:6c:87:06:e1:23:ee:65:
fb:77:8a:95:b6:17:96:cc:60:6d:92:17:c4:27:fa:
b2:f9:12:2d:c7:5c:5c:cd:e6:94:d4:03:e9:04:e9:
9a:cd:3c:f3:4a:60:2e:a6:90:9f:50:b3:d3:a8:f6:
fa:11:e5:e5:01:25:db:5d:23:41:0e:1a:25:7f:95:
a8:64:55:41:46:7e:5e:20:e4:d4:bb:40:94:ba:f8:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:52:93:26:9B:21:EB:1D:3F:1B:D3:E0:89:FA:3A:32:9A:36:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9740cf1-67c6-3309-af76-1b247f5dd5d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:cf:d8:7d:c8:1a:99:3e:98:b9:8a:79:ff:55:89:6b:f2:64:
83:a7:b2:8a:ad:7f:63:9a:95:55:44:a8:f5:58:89:9a:54:16:
44:81:d5:ab:71:1c:f3:7d:20:73:34:0a:7e:91:64:df:e5:98:
35:56:20:91:8b:3d:89:a6:06:c1:5e:2e:5e:48:e7:ff:12:58:
01:5f:7c:2f:53:b9:42:e2:90:7e:28:d9:eb:77:f6:1b:62:d0:
bd:33:ea:1f:aa:ab:51:94:e8:c8:0b:f6:32:fd:50:3f:c2:86:
dd:cc:06:c4:1b:07:d1:e0:f6:5b:68:f6:3a:bc:8d:28:b0:25:
51:cc:2f:6f:05:56:b8:aa:1e:27:ae:59:68:cf:3e:8f:a4:a7:
09:c0:c9:be:54:80:bb:e2:10:15:4e:bf:e4:17:fb:8c:1e:3e:
91:a6:7a:3c:db:23:43:df:c5:4c:3f:af:c0:9c:e8:dc:e0:3b:
f6:2d:45:ee:0b:d5:cd:e1:c7:f6:29:fe:03:0d:ca:93:a9:5f:
b6:c6:2d:83:c9:58:6f:ca:2b:4e:c6:ac:90:1c:e9:70:64:94:
ea:d3:af:ea:77:78:61:22:f9:05:78:c4:3a:4a:28:ee:05:e7:
01:5b:e3:ea:fd:53:88:6a:74:a4:41:69:45:cf:34:8b:6a:e1:
46:10:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:23 2025 by rpki-client