Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d21a6ed-d2cc-3cd5-964e-48157630a681.roa
File: 0d21a6ed-d2cc-3cd5-964e-48157630a681.roa (raw, json)
Hash identifier: HS1jkMNHAikn+njei2GoJz0lN5FAqvgYMxknSDZJs9w=
Subject key identifier: D1:D6:82:D5:40:49:37:2F:09:8B:C2:F0:47:C7:74:4E:88:33:8D:A8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C0611F725A6B21F01C800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d21a6ed-d2cc-3cd5-964e-48157630a681.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 73.2.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:06:11:f7:25:a6:b2:1f:01:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=2412f280-3f89-481d-9dd4-31112837cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:c8:24:56:d4:ac:ed:f7:d1:44:78:d1:41:
a0:0d:5b:bc:f4:30:cd:bc:7c:06:98:51:2d:8f:70:
36:81:e5:c2:90:ed:0c:ce:a6:f5:99:e3:b0:8e:fc:
81:eb:45:d9:f6:a0:2c:9e:04:60:5a:99:69:19:cb:
aa:0e:0d:49:82:52:7c:cf:a7:0e:91:01:fe:f0:3f:
f2:ff:91:07:88:95:76:04:39:45:3a:22:ac:f7:89:
c1:af:e9:e4:83:37:76:32:43:07:cb:7c:12:59:f5:
65:2a:d0:16:cc:79:ce:57:ae:39:ec:68:91:d9:d2:
de:27:1d:c7:ed:77:73:17:0d:ce:9f:7f:e3:d6:4f:
f2:0d:39:43:6c:98:be:0f:2c:56:24:c1:4f:41:9b:
0d:de:ef:2b:a0:35:e9:6c:9e:c0:0c:9c:fc:e2:f8:
92:7d:b7:6b:28:2c:ca:bf:81:5d:ee:45:fc:03:69:
fd:c0:57:de:34:af:ed:84:81:2f:66:17:aa:e7:09:
c6:99:5d:2f:0a:3b:c5:8c:12:e4:7c:60:e2:17:5a:
9b:2b:d3:e4:b4:04:08:eb:fe:dc:af:38:1f:77:5b:
7d:18:0c:72:6f:66:00:a2:35:43:d8:6a:bf:62:11:
dd:ce:8a:51:ef:09:af:ae:5e:52:55:43:7a:f7:a8:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:82:D5:40:49:37:2F:09:8B:C2:F0:47:C7:74:4E:88:33:8D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d21a6ed-d2cc-3cd5-964e-48157630a681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.2.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:02:83:cb:0e:bc:4d:65:4e:07:74:50:3f:0b:55:a2:e5:6f:
27:01:d9:5c:f3:53:a5:c8:50:4b:2d:2d:20:29:fd:0b:dd:b9:
7c:26:d0:1e:17:e7:35:57:1f:07:10:cf:4d:19:20:6e:b0:64:
cc:89:75:36:21:58:59:44:db:e3:31:b4:ab:a6:65:97:50:83:
c2:0b:da:3c:06:27:cf:d0:f3:2c:98:ed:a0:26:6e:3f:54:92:
eb:9b:08:67:f6:77:98:34:b6:01:7f:a8:62:44:c3:07:a6:4b:
89:95:89:0e:67:9f:e7:ec:3a:1a:9c:c0:ef:50:08:b0:dd:b1:
87:44:e6:26:1b:d7:e1:56:c6:cf:33:e1:43:66:30:5d:2a:3a:
75:f5:d2:ef:4e:ab:e9:e3:e5:54:7a:c4:a5:49:c4:38:05:5f:
7b:0a:56:7e:e5:1b:36:30:71:3a:5c:78:b5:d5:2f:61:b2:64:
d3:b0:37:eb:29:eb:20:fe:87:f0:20:e8:61:c9:d2:14:f6:76:
73:a5:53:43:70:1d:12:2a:c2:40:4b:c9:a9:66:ef:73:97:3c:
c7:ac:30:da:b1:2b:e5:bc:e1:f9:95:12:74:7c:0d:d5:33:35:
e3:65:84:d2:a6:fa:5f:16:09:22:3c:fc:72:9b:38:8b:81:ba:
19:19:24:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:19 2025 by rpki-client