Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436e29f7-2482-3b1c-9916-b2efa7921ae3.roa
File: 436e29f7-2482-3b1c-9916-b2efa7921ae3.roa (raw, json)
Hash identifier: FSo8hefL1EJXyJnJeHLeFkPgMXjS4MpH/CGn4d4SmZk=
Subject key identifier: 70:BA:EF:70:8C:D8:E8:9A:80:DA:41:FD:1A:56:91:59:3A:7F:83:9C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C0FE0F9DBE8C298CED100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436e29f7-2482-3b1c-9916-b2efa7921ae3.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 13367
IP address blocks: 73.94.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:0f:e0:f9:db:e8:c2:98:ce:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=95dc0d33-585b-40e5-b97b-96ce0e78037e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:7c:9f:9f:9d:86:66:12:98:c2:07:f3:a3:
0d:35:1c:2d:3f:dd:b4:ba:89:f7:cc:b1:a0:96:7d:
47:c6:97:22:57:18:2b:a9:47:2a:49:14:b2:ad:f4:
2f:88:9a:94:bc:9a:ca:63:f4:0a:62:68:53:90:fd:
30:74:81:1f:7e:a4:cd:9a:08:88:41:fd:97:f1:7d:
95:ea:a5:e9:f7:2e:2e:28:b1:21:9b:1e:90:87:e1:
56:63:00:21:d5:d6:01:e4:c0:ab:c8:6b:0a:bc:d7:
0d:78:63:67:03:16:64:e0:4c:ac:3f:50:9f:cf:79:
81:c0:7b:4c:5a:64:5f:fe:9d:76:84:9b:e2:ed:fe:
d3:59:f4:21:12:37:5e:ee:0a:8b:e7:2f:ae:79:a0:
b7:8e:66:b2:ac:80:b0:c2:ca:95:cd:fe:4f:9f:5e:
c1:47:05:0c:6c:01:b0:84:75:4c:fe:85:a6:4c:a5:
7a:06:c7:4a:00:56:94:07:7d:c6:44:03:43:db:b0:
a2:13:f6:b1:0d:b8:bd:f3:87:1c:d0:db:18:1d:0f:
9b:16:44:d1:c2:85:ef:5e:18:ee:32:11:cb:86:e1:
78:78:82:37:f1:34:b2:a7:8e:0e:f6:4b:bf:f5:e6:
6b:43:d0:ba:6e:35:8d:92:2d:20:26:b4:4f:09:c1:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:EF:70:8C:D8:E8:9A:80:DA:41:FD:1A:56:91:59:3A:7F:83:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436e29f7-2482-3b1c-9916-b2efa7921ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.94.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:9f:0f:cb:d3:84:8b:7a:e9:ab:92:22:e4:7e:6b:6e:5c:89:
73:89:7b:d3:eb:bb:9e:49:23:1d:56:fe:c0:9e:ab:ba:57:85:
f8:bc:b7:36:f3:07:ac:72:7d:16:7a:0c:23:c9:11:45:20:ec:
8c:69:39:0b:5c:9a:06:da:b3:cb:2d:b1:66:2c:9b:0d:79:ed:
e7:c9:9a:56:e1:77:92:e3:53:8b:10:c8:8c:1e:2f:cf:35:15:
f9:bf:47:41:ac:0b:66:ce:5a:1b:e2:70:4b:d2:ce:b9:e6:04:
de:da:a1:3e:cb:91:4e:06:29:1f:d1:61:25:63:df:81:d8:4c:
0a:df:45:49:be:a7:c3:dd:16:57:5b:0f:ba:69:31:99:89:7f:
94:23:ae:ff:c1:99:a5:58:06:73:dd:94:1d:d5:31:f5:a2:70:
4a:d7:26:45:0a:d9:9f:04:b4:db:cc:bd:c9:18:22:7b:88:65:
e9:7e:98:a3:a5:36:66:1c:0e:28:ad:ba:63:16:80:d2:15:20:
e3:5d:d1:53:ba:43:01:04:94:e8:e4:e0:5f:ee:55:bd:9f:4c:
79:38:ec:ba:89:19:6c:26:d1:c4:dd:a9:7e:52:fa:63:9b:98:
90:09:9b:a7:1f:06:4e:e2:9e:31:66:61:95:37:60:bd:44:85:
89:13:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:47 2025 by rpki-client