Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/775d68e9-c1da-345f-a8b5-7bc84a80d896.roa
File: 775d68e9-c1da-345f-a8b5-7bc84a80d896.roa (raw, json)
Hash identifier: y9/PwEKxI2YpTSCgaZnuQm/HZHFxAUlvKhFUpmEx+q0=
Subject key identifier: 88:82:67:C8:2B:08:45:F9:FF:29:E2:CC:56:78:2C:A3:67:B5:B4:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CACA7ADC8EDF3834B45C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/775d68e9-c1da-345f-a8b5-7bc84a80d896.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 73.43.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:ac:a7:ad:c8:ed:f3:83:4b:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=48c6e2b3-b6ef-46d0-8e7f-56ae00051c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:d0:4e:44:84:d6:37:73:10:b8:5d:e3:72:
40:ea:cf:b7:b3:d1:3d:25:0e:66:e1:50:f1:2e:bd:
e5:57:ea:48:0c:26:51:00:42:9b:d5:d1:b9:de:b9:
45:2e:12:76:03:a9:4a:70:8b:50:37:a4:ad:a3:f9:
f2:0d:23:9a:f7:20:95:d1:03:34:8a:17:d4:8d:6a:
09:9c:96:2e:0f:83:e5:28:73:cc:57:d6:38:bb:91:
10:17:67:15:a1:b3:4a:b4:f5:24:9d:30:ba:ef:44:
7b:58:bb:ac:2f:aa:20:eb:74:64:58:10:a3:06:42:
88:03:8f:a9:29:e2:1f:95:42:dd:39:83:15:8a:a6:
24:1e:34:11:eb:c6:8d:33:9f:22:a2:00:2f:7b:05:
33:7f:91:75:9a:8b:c2:65:fc:e9:7c:d2:6e:5f:d7:
66:2e:8b:65:11:65:bf:6b:94:94:84:06:22:bc:3c:
af:3b:8f:c7:61:90:65:7e:71:e4:21:2e:f3:ac:76:
8d:3f:0e:07:69:47:d5:2d:9c:53:ed:b7:21:65:c5:
ee:0c:84:60:b8:69:93:3d:b3:b1:09:c9:fb:7f:88:
1a:51:a0:98:da:05:69:fa:09:a1:cb:c2:8c:6c:d9:
18:d9:c2:61:0e:96:98:46:5d:b2:5f:9e:8f:d8:fd:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:67:C8:2B:08:45:F9:FF:29:E2:CC:56:78:2C:A3:67:B5:B4:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/775d68e9-c1da-345f-a8b5-7bc84a80d896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.43.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:09:05:e4:c3:04:6b:a4:7b:49:fb:73:de:da:95:61:62:3b:
87:42:a4:f8:80:6b:d7:2c:f2:e9:d2:a2:e1:2b:d1:4d:06:d4:
55:a6:d2:03:54:77:1e:17:28:d3:0a:e0:5a:ad:65:c8:25:b2:
7b:30:92:88:af:a7:16:39:36:87:03:e4:13:c5:a0:74:9e:b4:
ca:50:55:4c:ff:f6:a4:e6:43:a7:fa:63:14:17:65:eb:fb:94:
5c:7e:5a:ab:49:30:8c:8f:e2:a6:e4:58:80:e0:2f:4d:5c:a7:
6f:4e:26:7c:db:52:40:fb:6c:80:1e:98:ed:f5:9f:2a:86:2c:
8a:46:ac:97:7c:46:86:66:81:da:53:99:32:39:fe:61:c9:f8:
a5:8b:a7:ee:fa:91:25:a3:4b:d4:b4:2d:0c:ea:64:53:6f:bb:
6c:00:c6:e0:a5:7b:de:6a:75:c0:ac:f3:2e:84:ee:3e:50:a2:
43:85:99:d7:77:a0:fb:b1:16:85:e8:6a:8e:7d:e6:85:68:98:
c4:b0:f8:af:0c:56:e5:43:dc:43:74:a9:2e:f7:57:e1:e5:c1:
c2:a8:bb:00:5d:e6:71:2a:51:40:cd:83:88:c4:33:8e:ee:1b:
15:a1:ae:c7:a3:4d:6f:0b:24:12:22:ac:c7:68:34:de:79:53:
87:7d:89:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:31 2025 by rpki-client