Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/897f44b3-db4c-3c22-bcb6-c65b829b1978.roa
File: 897f44b3-db4c-3c22-bcb6-c65b829b1978.roa (raw, json)
Hash identifier: J87QfMZgLU84r0VPKlruXLZ3RI6sG6SYDvR5hfe50/w=
Subject key identifier: 1A:EE:4C:56:B6:CB:B7:AC:25:F5:27:64:32:A2:B0:14:23:FE:87:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C0ED2707A84C29C3D5C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/897f44b3-db4c-3c22-bcb6-c65b829b1978.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 73.91.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:0e:d2:70:7a:84:c2:9c:3d:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=49c95cf0-93cf-4abe-8baa-8a10f03163f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:ce:a2:43:d9:ba:6d:07:e3:00:4a:4a:97:
81:5d:42:f1:0c:c5:c1:be:27:e2:e3:46:95:b5:29:
4a:70:8c:70:41:3d:62:bf:9e:7a:ee:e3:91:ab:27:
c1:59:fa:b1:34:2b:2f:ab:db:b0:0f:da:39:6d:66:
4e:7c:93:df:49:e2:30:36:da:4d:90:c8:1c:53:e0:
6b:58:1c:80:ed:b6:3a:19:41:f9:27:17:a0:7b:f7:
58:71:9a:2f:93:a7:d6:ea:57:1d:f3:15:99:fb:42:
4e:5a:42:34:d5:70:e4:af:85:ab:5c:b3:ea:21:63:
81:56:18:d8:e0:9b:4f:dd:9a:9c:fe:74:ad:eb:c7:
29:28:e1:89:63:21:fe:3e:c7:ea:d5:da:d2:01:8f:
44:aa:0d:bd:92:12:58:dd:8a:7e:1e:00:40:35:6b:
36:53:13:22:62:7f:4e:e1:7a:90:df:1b:cf:19:29:
4e:5f:52:2d:cf:82:43:e8:95:b2:4f:0f:06:8a:d7:
5c:be:96:15:3f:8b:b9:aa:0f:6c:52:36:59:b9:a8:
21:cf:a8:d1:e7:c5:b9:01:a4:8d:2d:17:bc:de:46:
6c:e0:d4:92:fa:9e:25:1c:61:4c:25:1e:73:74:c0:
b1:fa:f8:99:df:7d:cc:e1:00:fc:19:7f:41:98:40:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:4C:56:B6:CB:B7:AC:25:F5:27:64:32:A2:B0:14:23:FE:87:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/897f44b3-db4c-3c22-bcb6-c65b829b1978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.91.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:bd:1c:cd:56:c2:57:15:66:8c:8e:81:75:06:2b:f1:6c:87:
1a:44:98:24:c2:fb:3f:df:5d:2a:ae:4f:f9:db:cd:aa:7c:df:
a7:61:dd:b9:ac:da:56:f5:b7:7f:c2:fd:5e:38:f6:03:92:ce:
00:4a:28:df:7c:d3:7e:01:aa:b0:e7:5d:38:62:a1:10:fb:63:
20:ed:83:37:e2:7f:b9:2f:66:00:c6:33:b5:17:e4:a3:3c:36:
3e:75:32:29:07:79:64:76:8a:6e:8c:43:f5:08:94:ac:cc:d3:
05:0c:91:f3:bb:9d:a1:8b:a5:fd:90:66:5e:d1:f4:d1:4e:d4:
6f:e3:a3:e9:a5:7f:78:49:7b:1b:6e:35:74:18:dc:5a:66:2c:
cf:b2:b2:5d:b1:29:93:0b:fd:59:5c:ef:f4:af:9d:78:40:9b:
0c:64:21:da:4f:05:fa:82:b5:2c:d6:cb:d3:3a:f3:ab:e1:5a:
b5:fa:10:43:db:0e:1c:30:f6:97:c8:42:84:e3:7d:6d:b7:28:
4c:f6:94:00:e6:70:4d:9e:f3:0f:83:91:46:f8:ee:2b:1e:39:
a0:8e:cf:79:f1:76:68:45:db:c3:eb:50:5d:e3:fd:0a:0c:e9:
de:88:c9:24:14:7d:ba:d9:ea:1f:bf:9d:98:c3:b1:ed:30:aa:
26:89:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:28 2025 by rpki-client