Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087ccfa7-84ac-33d1-820d-9e5f2956c14e.roa
File: 087ccfa7-84ac-33d1-820d-9e5f2956c14e.roa (raw, json)
Hash identifier: ncKT4VI9XEbYe0526/9WMWw9qbcO4oX1sbClJHpcfpE=
Subject key identifier: 18:E1:D8:F7:81:E5:64:42:00:73:87:D6:EE:80:B7:DC:BE:AC:45:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F9308BD12DB0981D59F580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087ccfa7-84ac-33d1-820d-9e5f2956c14e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.255.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:30:8b:d1:2d:b0:98:1d:59:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=fecc2fa1-bff1-4c2f-ad5c-97ff14fc6c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:2c:23:d4:ce:28:df:17:bb:35:53:28:dd:
a8:02:32:62:2f:22:02:bf:08:ff:7b:01:03:1d:ea:
13:83:3a:99:03:2c:e6:f7:70:f9:6a:6b:8d:94:e4:
db:51:c9:9f:1e:34:13:ba:cd:fa:16:2a:cb:14:35:
1d:e7:79:9e:74:bb:4e:76:a9:64:a1:af:1a:de:bd:
bb:2d:fd:86:1d:48:e8:df:f1:1d:ee:d6:1f:15:e6:
ff:a9:12:ab:c5:0e:8b:fb:85:7c:77:9d:ca:16:18:
f4:3b:8d:f0:c4:f2:c9:b2:a1:d7:d6:1d:d4:87:06:
6d:e3:3d:b0:f6:16:5e:73:92:02:b4:8c:e8:21:ce:
9b:7a:d6:0b:7f:11:ed:8a:1c:a3:f3:86:8a:d2:75:
6d:47:57:55:ae:15:b5:fd:a8:a4:72:41:02:74:bb:
bc:d5:dc:23:29:fc:1d:69:e2:f9:fa:a6:4b:0a:49:
98:a9:86:9c:c3:da:8e:0f:43:78:3b:74:90:62:b1:
26:4d:0a:17:52:d9:71:98:ef:3a:b7:b6:c3:32:ae:
c3:fb:01:e8:d3:95:15:aa:0e:ac:9e:35:68:aa:6f:
cb:4b:57:23:98:c8:05:1a:b3:54:75:fb:43:01:08:
eb:7f:aa:cc:9d:f0:58:83:14:d2:12:e8:67:5d:f0:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:D8:F7:81:E5:64:42:00:73:87:D6:EE:80:B7:DC:BE:AC:45:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087ccfa7-84ac-33d1-820d-9e5f2956c14e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.255.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:19:5d:dd:7d:2a:35:83:67:3a:38:39:b2:df:d9:52:f9:9b:
00:a2:53:f8:c8:a1:d8:9f:98:a0:a1:8d:ce:97:ac:03:c2:32:
1a:9d:9f:4e:7d:9f:fc:48:e1:e2:be:7d:f1:82:9f:d7:28:b3:
be:94:80:82:29:0e:47:e8:34:61:37:65:f9:bd:2d:81:74:86:
2c:ed:02:4e:38:1f:9c:e5:d6:d8:0b:47:31:1e:ed:ab:c1:86:
91:89:eb:df:59:c0:8b:fd:8d:3e:55:a5:55:8d:91:5f:d1:84:
78:27:dc:17:e9:84:b0:8d:f5:26:84:56:bf:e7:63:b2:20:16:
2f:f2:d2:af:d4:7c:86:4d:2a:dc:66:f8:7d:5c:fe:5f:be:f9:
7c:52:df:a9:64:3e:ad:9b:31:18:f4:42:89:ea:1d:c9:5f:82:
86:58:ca:6c:98:11:a1:5d:9e:e3:49:f1:4d:a5:79:9d:b0:6c:
a1:2b:9c:d7:33:4d:f9:f5:69:d0:51:2c:66:e9:4e:bd:0d:a5:
fc:3e:b6:09:b2:05:4d:20:ba:cc:51:cd:79:de:71:17:36:03:
33:62:c7:16:2c:11:6a:fa:f8:cb:3e:68:ef:a0:b2:98:fe:20:
e0:a9:3c:c2:49:50:ec:67:ba:02:53:87:7d:92:58:89:9f:8e:
61:99:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:22 2025 by rpki-client