Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa
File: f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa (raw, json)
Hash identifier: qIpQpEYRQlM+nvBm80vEpjzsMB10KvrnA5PM46GymDw=
Subject key identifier: A5:4E:14:B6:60:3D:EF:0C:7F:62:F5:77:6C:C8:D9:FD:1D:98:7E:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1064305F6E292974485600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.33.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:64:30:5f:6e:29:29:74:48:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=92085398-b276-4b51-9332-d948e5216bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:b3:9f:52:c4:34:c0:2b:de:f5:3c:be:e7:
59:3f:b5:0d:04:bc:4c:99:92:11:58:57:96:6b:7c:
0c:3a:d4:68:07:9e:f1:3b:a4:48:aa:3f:43:86:ad:
4a:f1:c2:83:a2:bb:e4:81:c9:76:45:e2:45:66:30:
50:18:9e:4c:31:53:a2:77:99:b5:3b:3a:fd:ad:5c:
c8:9d:03:6d:d0:ea:b8:06:56:22:cb:0f:a3:31:fe:
c5:3b:1d:c0:8d:31:31:de:21:89:c4:bf:0e:1a:8a:
04:16:94:55:dd:32:05:02:da:6f:d9:a2:7e:ce:e9:
9d:76:ad:0a:c8:c0:54:fe:06:ca:10:ba:6c:d9:90:
7d:b9:b2:05:97:3c:cd:b5:8a:99:ab:d7:05:34:31:
9c:6b:b4:e1:79:87:c1:24:f5:4b:b4:2d:99:4e:5e:
92:2c:fb:e4:8d:c5:cb:31:eb:52:da:c4:4e:66:8a:
9c:00:15:cd:81:aa:d4:f8:49:47:af:b3:c4:95:54:
87:a9:58:30:9e:3b:d3:13:cd:72:a8:5b:6c:f8:0d:
b0:54:b3:aa:3b:64:5f:dc:3b:af:95:ea:07:79:1f:
a8:df:35:1e:ff:a8:70:00:dc:21:ba:2a:68:70:68:
b3:59:8a:20:4b:6c:63:c6:04:63:cc:12:bf:13:50:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4E:14:B6:60:3D:EF:0C:7F:62:F5:77:6C:C8:D9:FD:1D:98:7E:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ad:23:e9:f6:cb:ff:70:8a:d1:07:12:88:5c:21:89:6e:8f:
f7:73:ec:a2:06:10:ff:5d:2d:d9:80:4d:22:29:d0:3f:50:2d:
1f:86:db:a3:e7:1c:9b:32:7d:f4:5c:7a:72:06:0f:b4:5f:e3:
24:c4:b3:16:6c:14:6a:88:81:37:e5:64:9f:87:ce:17:ef:ff:
dd:e7:95:13:58:5a:5c:10:ae:d4:75:8d:1f:02:09:8d:ff:59:
b7:69:cc:99:0c:f1:84:f4:87:88:88:84:9e:03:19:2a:8e:d4:
e2:fc:33:f5:86:94:e0:46:65:27:c5:7b:ca:f5:9d:29:b7:7d:
72:c4:0d:f3:e1:87:8e:98:a1:e0:48:9f:74:46:08:12:8d:f5:
24:49:c4:29:74:c6:ab:3a:0a:88:74:d3:b4:b4:0d:35:a7:64:
76:8d:34:a0:2a:1e:35:01:5b:a4:3a:bc:e6:9c:a0:f6:05:12:
1a:14:a3:7f:71:30:4d:84:65:e1:b6:e3:8f:d6:16:d4:6b:9c:
7c:fa:d0:8f:24:05:14:77:f4:56:17:d6:e2:2c:ca:f6:fe:60:
ec:1f:b9:4a:7a:4c:1e:ce:f2:5a:c5:12:e3:69:ad:62:1f:b5:
11:c3:0a:6d:1d:ed:5e:2f:b0:6a:89:43:e8:eb:45:4b:23:9e:
97:c0:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:12 2025 by rpki-client