Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c457c07-0626-3cbd-a250-08ea6c04cc1f.roa
File: 8c457c07-0626-3cbd-a250-08ea6c04cc1f.roa (raw, json)
Hash identifier: 71x/jYPokynQSqhvGClZe6F53ZxaBRt1D8d7njM0lvs=
Subject key identifier: E1:2F:F1:E7:1F:18:07:BF:F7:92:D5:9A:6C:35:F8:82:80:02:E6:D6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF157F98EBB4A908E0EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c457c07-0626-3cbd-a250-08ea6c04cc1f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 73.165.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:15:7f:98:eb:b4:a9:08:e0:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f3e60cdc-8644-4858-bae9-edbd6a044b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:0c:10:19:16:2f:95:4b:34:e6:50:a1:38:
11:93:e4:f5:97:fc:97:36:50:53:8f:b7:a3:4e:36:
5a:6d:6b:c3:ed:16:0c:d5:d4:a6:4d:7d:c1:fb:30:
fb:0d:a3:c0:69:75:ec:c7:3b:08:76:2b:c4:6c:b2:
e1:59:2b:e3:70:ee:25:27:39:ef:0b:40:74:34:00:
11:bb:7b:b8:24:08:a9:93:74:17:a4:ea:5e:dc:ec:
af:0f:37:aa:ab:2c:af:2b:10:f8:03:27:f1:d2:5f:
44:4f:15:72:83:66:57:a7:51:c5:00:7b:d6:76:16:
22:cf:87:52:bb:46:03:83:ed:01:d7:fb:f0:86:27:
c2:49:27:46:94:0f:c2:fb:be:17:17:9a:67:d8:5f:
4a:21:fe:dd:3a:6c:8c:61:20:7e:cd:8c:24:c0:64:
05:8f:a6:81:21:03:9d:9a:44:cc:88:e1:d4:fe:37:
dd:ef:39:9c:4e:2e:87:4a:9a:b5:87:e3:17:87:c3:
2c:f2:9f:8b:c4:fa:76:8f:6c:90:dd:ed:a7:84:ce:
9e:06:ad:27:da:4e:8d:96:a7:54:32:78:88:88:d7:
84:c0:aa:3b:17:21:f3:86:60:54:75:5e:bd:82:d9:
72:60:ab:65:04:69:85:4b:10:cf:34:b7:33:67:05:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:F1:E7:1F:18:07:BF:F7:92:D5:9A:6C:35:F8:82:80:02:E6:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c457c07-0626-3cbd-a250-08ea6c04cc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.165.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:c3:7e:7f:fc:5b:3d:1b:5f:92:b9:d4:b5:1c:e5:49:33:44:
45:ac:67:de:9b:29:ca:20:ce:f8:07:d0:58:95:e1:7a:8c:09:
b2:cd:6c:6b:aa:5d:b9:8a:12:b5:86:51:01:38:b8:b7:13:42:
ae:4b:e5:ea:80:f6:8d:c4:26:c8:d0:8a:f9:7f:b0:38:52:c7:
40:b8:07:72:28:16:1b:ab:a9:f6:2c:08:b1:14:a9:bf:a6:7c:
39:c9:4c:7c:35:a0:f6:13:a9:eb:13:c1:60:e4:bf:70:c2:06:
27:5c:58:0b:ea:94:f4:2e:24:58:3b:13:5b:1e:47:05:5e:c5:
02:f7:16:47:bb:d2:c0:ed:06:12:c5:cc:e7:de:7d:bb:05:36:
64:c8:7d:63:a2:6e:b3:7b:f0:b0:46:63:e6:34:1b:33:a9:b4:
df:ab:99:82:4a:b6:62:39:7e:d5:a3:0a:94:e8:4f:16:9d:c5:
0a:1c:df:f4:58:6b:8b:0f:8b:15:d0:5a:f8:7b:7e:83:79:1b:
a1:1f:12:45:1a:c2:1a:66:87:c8:e0:57:85:62:e0:21:b1:db:
37:69:2c:fd:bb:05:09:46:8b:e5:c1:1f:70:c3:4d:b0:01:8c:
4c:66:05:3f:41:3a:4d:81:eb:23:5f:30:22:19:b4:65:d2:4d:
97:56:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:42:58 2025 by rpki-client