Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4005219c-2854-3e1e-9b1a-390ac4998ca4.roa
File: 4005219c-2854-3e1e-9b1a-390ac4998ca4.roa (raw, json)
Hash identifier: t2j2vqRGhwRd9iPjxlHI94C9KMQ24Rc6ei6Lmqko98k=
Subject key identifier: 67:5D:5C:9F:F8:90:64:8E:3D:82:E1:CC:D0:8E:00:95:A8:A9:E6:2F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFA277CBB12A050CB94900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4005219c-2854-3e1e-9b1a-390ac4998ca4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.75.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:a2:77:cb:b1:2a:05:0c:b9:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=aa05ea10-7ebb-4fd7-b122-f75d3edc26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:9e:ed:8a:0e:48:a6:56:2e:d6:81:41:c3:
a4:54:75:04:6d:4f:0b:46:ac:00:5b:84:89:cc:e6:
c8:53:e5:50:95:4b:21:14:49:ad:a2:22:3e:d2:d5:
7d:75:05:df:c8:14:ab:c9:e2:b4:95:44:5c:26:58:
bc:f0:f4:aa:10:f5:39:94:4e:39:80:b9:f4:9f:3d:
00:3f:ad:cc:d4:a2:78:d1:42:34:be:cc:23:b8:f3:
2d:3b:a2:8b:cb:fa:3f:34:2a:6c:fe:28:28:8f:2c:
ad:2a:57:6b:43:c2:04:50:ec:71:af:6b:e1:51:fa:
35:89:47:ff:fe:4b:f8:61:e2:d9:af:30:58:60:42:
e8:ba:2a:4f:55:38:96:1a:d5:9a:ea:45:a6:94:6e:
c4:bd:10:51:1c:11:52:e9:aa:54:04:f1:3d:96:a6:
4d:87:2a:cf:9d:a4:63:6c:3f:79:07:f0:18:e5:72:
63:34:13:43:74:81:6a:b5:9a:ce:f9:eb:44:73:70:
02:1c:ad:bc:e3:ae:ed:7c:03:55:ac:1e:c4:a1:97:
07:c1:18:f8:1a:e6:bf:15:a8:22:f4:bc:c9:b1:db:
c3:fc:75:6a:0f:cb:ae:1b:06:04:76:27:67:4d:ea:
1e:8a:39:3d:20:ad:0a:68:c5:dc:99:49:cf:17:41:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:5C:9F:F8:90:64:8E:3D:82:E1:CC:D0:8E:00:95:A8:A9:E6:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4005219c-2854-3e1e-9b1a-390ac4998ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.75.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f6:4e:9d:2f:b8:bf:5c:cd:64:10:61:93:2b:e5:b4:ad:06:
db:4e:2c:40:04:ad:36:5c:e7:00:0c:ae:ff:8e:cd:d2:45:77:
b5:20:4c:85:80:3c:b4:02:68:7a:4e:0a:56:8f:8e:3c:2f:fd:
a2:78:68:c7:01:25:15:30:2a:ad:93:8d:48:c0:d3:a3:56:a4:
13:59:94:48:be:8b:11:b1:0c:27:cb:36:60:3a:84:64:19:f4:
0f:b0:c0:e4:1c:03:73:f5:52:78:f0:30:ce:9a:85:5e:76:0b:
ab:7c:e8:ba:f2:c6:fa:e8:ff:5a:1d:62:64:8f:db:2c:5f:5d:
84:dc:92:b4:68:50:9f:77:dd:1b:af:a8:75:db:91:4c:69:14:
be:d7:42:63:95:58:bd:e2:5e:af:15:70:ae:f8:48:8d:97:37:
0b:20:ab:2a:7f:3a:af:20:1f:47:03:f3:a9:8d:e1:aa:ef:07:
c8:1e:bb:57:7b:ee:2d:55:57:6f:18:70:c0:7c:e1:0a:12:a2:
3b:b0:60:9b:9b:d2:05:03:c9:6e:87:d1:b9:22:3d:fd:26:0d:
44:7f:dd:a6:17:52:8b:45:88:51:54:cf:ce:b9:60:33:da:d9:
f8:4d:42:61:63:e9:0a:36:ff:8e:74:59:db:ae:cb:4c:22:dd:
38:8c:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:16 2025 by rpki-client