Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13e73d07-1fc5-3558-882f-def70e3cd7f9.roa
File: 13e73d07-1fc5-3558-882f-def70e3cd7f9.roa (raw, json)
Hash identifier: SKzVVewOXqNsXzm94jwZRl3Jgb7a0zrXxzqtrybchi4=
Subject key identifier: 8E:AF:A4:90:B7:4F:CC:09:E0:1C:65:E5:D4:AF:DC:1B:FD:C2:E5:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0628863FB83BE4FD7E700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13e73d07-1fc5-3558-882f-def70e3cd7f9.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.194.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:62:88:63:fb:83:be:4f:d7:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e9a2d6f9-e74b-4331-bb65-ab7a59b15b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:33:79:d4:64:88:19:86:d1:38:c2:b0:f8:
d0:a2:fe:f9:35:c1:8c:76:8e:c5:fe:ca:44:9d:e1:
72:aa:3b:d3:0f:c5:0d:9f:69:54:5a:e1:c2:46:5f:
dd:d6:38:91:8f:80:5e:89:6c:2f:19:1c:40:e2:27:
4b:08:94:94:ef:50:ec:b1:a8:cc:d2:9f:2a:93:49:
a3:aa:ee:b8:d6:d5:ae:f8:e1:53:d4:32:5d:f6:b9:
28:32:c3:52:39:36:88:d8:81:f0:6a:3e:6f:df:54:
e6:a2:53:64:8d:01:ac:6f:68:14:86:ee:09:6a:49:
fd:4c:66:4d:29:79:17:83:ac:97:77:62:f2:94:49:
56:91:4d:01:62:6c:6d:d3:29:d1:3a:da:fe:a4:8f:
6f:89:36:71:e0:85:0b:fe:90:23:8c:4f:3a:c1:a3:
77:0d:72:79:ba:df:30:07:38:87:ce:f8:ba:eb:9e:
18:50:02:3c:6e:c2:c9:78:80:17:05:eb:a6:92:8d:
6e:b9:53:e5:a7:f4:ba:e1:45:7b:2a:be:59:58:de:
a7:e6:16:c4:69:ed:b2:2c:33:18:1f:2f:be:50:cb:
ec:69:03:8d:5c:1f:70:72:1b:01:0f:24:b7:cd:68:
a6:ec:bb:3d:29:38:54:98:e5:f5:26:d1:c3:86:2a:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:A4:90:B7:4F:CC:09:E0:1C:65:E5:D4:AF:DC:1B:FD:C2:E5:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13e73d07-1fc5-3558-882f-def70e3cd7f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.194.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:cd:c6:de:17:bb:cc:0f:44:d1:fb:6a:22:d1:71:e3:fb:42:
5f:10:43:cb:0c:3c:36:4f:d5:4f:16:b2:03:e4:fc:fe:8a:9a:
32:5b:4d:2e:21:8c:08:7c:6d:13:3c:30:8e:0b:de:b9:05:3c:
91:04:ce:f7:bf:25:c3:41:f7:ec:09:62:e3:a8:43:eb:dc:3f:
4b:dc:23:17:e8:72:fc:2c:68:b3:10:b7:58:85:85:1d:b5:07:
2a:91:8e:6a:e8:20:b5:d6:40:91:46:45:42:4a:6b:7b:63:e1:
92:25:a9:19:98:2a:81:48:7e:59:12:39:9f:74:ce:fd:2d:9e:
56:43:0b:2c:9f:71:40:bc:01:f5:17:c0:ff:7c:91:0e:c5:c4:
56:a6:1c:d7:5e:45:c8:b7:21:3a:60:32:2f:d7:b6:ed:b5:25:
20:e6:0b:b0:b3:27:bb:cc:60:0b:39:95:96:71:90:83:c2:17:
3a:d7:e7:21:65:21:53:3e:26:38:03:e9:4c:b0:a0:c5:e7:1d:
ec:7a:2a:a0:d0:ef:e9:fb:96:f7:29:18:b7:b0:d2:84:00:b8:
cd:6a:43:89:78:69:78:7b:58:d8:3e:42:c2:25:c1:d0:b5:76:
34:f8:38:be:2e:07:59:5c:ba:a3:33:a5:cd:55:5f:84:8c:26:
64:90:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:33 2025 by rpki-client