Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59c5b208-c285-36a8-a89f-fe03b4be6d38.roa
File: 59c5b208-c285-36a8-a89f-fe03b4be6d38.roa (raw, json)
Hash identifier: 8spm0wmnQz/Vwi84gxt0ikuS9mtzEFRF2xLDSd6z3OQ=
Subject key identifier: 67:C6:9A:93:5E:24:BD:59:46:0F:B6:5F:7A:D6:D4:A2:05:63:EF:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB056F39E0E971A5DF9A780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59c5b208-c285-36a8-a89f-fe03b4be6d38.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.29.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:56:f3:9e:0e:97:1a:5d:f9:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=057305eb-7227-467a-9e5e-cd6bcfc5cf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:d4:4e:34:b1:8d:16:ea:c2:6a:a2:0d:54:
df:0a:08:c7:e0:86:94:9d:d1:d4:21:24:82:b7:0d:
3a:2f:74:3d:26:ae:78:14:95:08:e0:22:ee:42:93:
e4:a8:d2:d3:79:b4:7e:9c:31:55:a1:fd:55:79:ed:
c9:b7:7e:aa:af:e9:7c:41:18:e6:18:b9:cc:0e:c2:
d8:07:e2:dd:d0:ab:24:ea:30:70:10:ae:a4:fd:69:
bb:6a:80:8b:e1:f2:8d:41:26:34:56:72:b5:8b:39:
56:8c:72:f0:d9:6f:e9:10:94:44:7e:82:39:ba:fd:
8f:c8:f8:e6:33:93:33:75:86:eb:6e:cb:16:b9:0c:
08:63:62:aa:75:a8:6b:87:88:3f:7e:24:89:66:4a:
3c:37:a3:3e:0b:8b:ca:68:cc:48:45:8d:b3:88:2b:
fc:91:44:87:b4:62:f6:40:76:4d:1b:a2:ad:e4:b0:
f9:03:0c:12:95:eb:ff:de:0c:92:e0:aa:32:4a:7d:
23:18:49:d3:d1:62:a7:74:89:9b:bd:57:76:3a:c7:
cb:ec:d8:6d:ef:0d:45:09:37:30:c4:77:c0:99:ed:
0e:85:59:91:2c:12:42:2f:d4:5c:09:b0:2b:46:b3:
1d:e0:35:29:db:9b:84:8d:70:3c:d6:e3:3f:35:e8:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:9A:93:5E:24:BD:59:46:0F:B6:5F:7A:D6:D4:A2:05:63:EF:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59c5b208-c285-36a8-a89f-fe03b4be6d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.29.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:84:c1:d1:50:2c:37:97:2c:f1:ac:62:5a:42:7b:c1:fd:75:
a9:21:43:0c:8c:68:13:1b:6b:20:f6:e7:59:e8:3f:25:6a:79:
d7:62:43:05:f9:87:be:3b:fd:4d:b2:ac:4a:87:99:92:bc:cb:
f9:c7:f3:ad:8d:94:ae:60:bd:96:0c:93:a0:2f:8a:59:6a:0b:
72:9f:32:cb:e3:17:6a:b4:8f:d6:6b:e5:33:e6:70:a0:fa:23:
04:b7:06:3d:6e:a7:97:57:28:bd:74:db:f2:7c:61:58:a9:5f:
03:af:fa:50:6b:31:e7:4f:0f:00:c0:da:4d:e6:bd:26:15:80:
e8:cc:6b:e4:4c:56:0f:a4:92:06:c0:e4:4f:64:c8:f5:c7:c0:
40:0b:ac:62:31:9b:d3:cc:7b:48:2d:b8:04:cd:66:e0:04:2c:
77:b0:b9:7c:5d:bd:8b:ac:1e:1c:3d:fb:f9:68:e3:ba:40:65:
1c:e9:15:a8:bd:7a:29:13:ca:21:21:e6:27:ca:96:85:2d:d6:
bd:92:a6:eb:61:30:27:2f:11:07:b9:4d:70:a4:3c:5d:bf:50:
41:21:85:d7:24:36:d1:42:55:ca:ab:0e:bd:a4:73:d4:78:bd:
5a:0c:f7:8e:ab:d7:76:22:28:29:68:89:3c:1d:f3:6a:5a:b7:
45:9b:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:27:42 2025 by rpki-client