Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27604fde-2a02-3988-80e7-9d78eeed80fd.roa
File: 27604fde-2a02-3988-80e7-9d78eeed80fd.roa (raw, json)
Hash identifier: naiUw45Um0GsC3wDNRpDtJNPzvMeycbh7Y86yzWi6DU=
Subject key identifier: 70:AD:E6:8C:0D:03:CD:D8:BC:FB:10:29:6C:77:BE:8C:AE:6B:0B:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B9334E844AAD2C0732100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27604fde-2a02-3988-80e7-9d78eeed80fd.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.121.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:93:34:e8:44:aa:d2:c0:73:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a5ea9d91-946c-445d-b22d-6d0b7d11bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:bf:3f:7a:a1:64:b4:dc:81:12:e1:89:f3:
34:79:3e:d3:d0:c6:72:b9:b6:76:5a:5d:04:ed:7c:
77:84:b4:0d:4f:98:89:a1:4a:b6:e2:b9:12:54:16:
94:fd:16:c4:05:1e:22:50:09:e8:0b:28:fd:0a:72:
51:a8:60:29:ef:61:97:b3:c5:55:e8:13:71:c4:6d:
fc:c4:63:be:62:d6:df:3d:2b:90:f0:5e:e0:10:92:
d6:8f:d4:b3:9a:f5:f5:8f:c1:90:73:9a:c1:64:82:
03:dd:52:59:c8:91:b4:17:a6:69:f0:80:8d:ef:c9:
1a:1d:2e:c8:60:d7:a3:1b:8a:11:6e:98:4c:ab:3f:
3a:68:19:a8:d4:db:63:11:36:00:33:0f:60:f5:6f:
11:c0:94:72:15:46:d8:db:f4:cc:b9:a6:47:38:bb:
0b:ab:69:a5:1e:f9:32:03:14:28:08:15:5f:d2:20:
b3:e3:7b:a7:4a:f0:9e:f7:fb:15:d8:5f:2b:50:10:
ab:a9:7c:12:b6:a0:08:cc:7c:37:0d:6e:b5:3a:0b:
cf:df:09:46:d6:a8:e1:cf:ff:dd:be:c1:76:57:b1:
ec:38:02:92:92:a7:98:b7:49:ff:ba:42:d0:25:64:
f0:4c:1c:62:77:58:6f:b9:05:60:ef:a9:24:7f:91:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:E6:8C:0D:03:CD:D8:BC:FB:10:29:6C:77:BE:8C:AE:6B:0B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27604fde-2a02-3988-80e7-9d78eeed80fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.121.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ec:55:2a:cd:3b:f4:6e:92:dc:1c:f0:8e:59:7e:6e:b9:16:
98:38:64:56:d8:4d:18:6e:3f:55:24:0a:cd:3e:3e:12:b8:63:
f2:2a:47:8b:12:41:35:b7:1d:59:f8:6b:f9:3e:e7:88:73:db:
9d:c2:7f:17:9d:55:be:0e:4d:fa:6b:0d:5d:54:71:f7:a7:cd:
20:f1:b4:21:0c:f4:8a:f4:2e:de:58:78:cd:1c:c5:82:e8:51:
36:1c:bd:63:46:6d:29:d5:e8:af:90:45:67:8c:22:76:b4:8e:
51:11:83:7f:11:45:94:63:e2:b6:2d:0c:bd:c3:a0:14:c5:e0:
98:50:b5:20:14:b9:1e:7f:64:40:7d:39:6b:46:9e:55:c3:de:
c9:f2:2c:71:be:c5:71:1e:3d:cb:6d:d2:6c:a0:dc:d5:42:40:
a9:91:7c:05:50:ed:25:d5:82:f1:fd:d0:53:78:01:f1:e8:cd:
0b:f5:ef:b1:e1:c3:8b:f0:8b:64:31:60:fa:3f:da:5a:75:6e:
7c:ec:47:25:6f:51:35:76:c9:fc:fa:1a:c8:d6:da:ea:9f:23:
a5:79:e7:cd:bf:94:23:12:0f:76:00:c0:30:7c:b3:17:eb:11:
93:d8:4d:18:4a:60:0b:ae:56:43:2f:0b:68:2e:b9:32:26:a5:
ec:a7:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:05 2025 by rpki-client