
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c0a9f54-351e-30c8-a543-afe528cd3bc7.roa
File: 9c0a9f54-351e-30c8-a543-afe528cd3bc7.roa (raw, json)
Hash identifier: 34OhrWaIoB2Bpn2FVvaK1Bpg5voB2q/75Tl9DWXRR7k=
Subject key identifier: A3:F8:1D:3E:0F:7D:7B:BC:D9:39:70:C0:BF:F7:88:E4:43:4D:61:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0014A8BAFE58BEC971440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c0a9f54-351e-30c8-a543-afe528cd3bc7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 73.223.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:01:4a:8b:af:e5:8b:ec:97:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3140abf6-55c6-47d8-beac-3cb0ea819bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:3c:a5:c2:85:69:44:00:80:2a:dd:ab:2b:
f2:d6:1c:95:99:b0:c8:9b:8a:c2:17:86:77:22:8b:
fc:22:01:50:4e:aa:54:c6:2b:2e:9c:a9:80:21:3c:
fa:95:bc:60:d3:af:f9:f9:2c:d5:cd:4d:e7:14:2b:
fb:04:13:4f:77:cc:bb:e6:a9:7f:ef:ac:52:1d:48:
3d:40:dc:5f:09:d6:d0:6e:9c:d9:f6:26:f6:20:46:
8b:81:d6:a6:35:11:39:cd:ea:28:e8:16:8e:00:00:
c0:5f:44:52:da:46:5f:f2:b0:63:c3:f1:8b:7b:7f:
e5:5a:c6:91:3a:ea:8b:d8:a0:28:2a:e1:af:22:e3:
0d:81:a3:59:ab:98:ce:04:25:cc:02:65:21:06:95:
75:11:31:83:5d:a7:b6:73:b2:ad:37:68:58:6f:98:
ba:08:a3:26:00:90:e8:83:eb:a2:68:82:d4:a9:91:
f0:e4:56:cb:2d:af:93:bc:8d:13:52:28:bf:65:59:
0c:cd:9f:a5:a3:de:bc:09:ad:6a:61:a6:a0:05:59:
38:7a:ae:bb:66:50:88:a0:f3:19:a1:7e:ef:08:14:
7c:eb:42:e6:b5:a2:6e:09:92:92:8f:83:f1:d2:69:
87:92:49:81:dc:36:31:77:6d:2d:b9:13:07:3e:ee:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:1D:3E:0F:7D:7B:BC:D9:39:70:C0:BF:F7:88:E4:43:4D:61:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c0a9f54-351e-30c8-a543-afe528cd3bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2a:e1:8b:8d:84:de:42:04:f4:8d:ee:54:44:3e:eb:a0:f1:
85:b3:2e:3b:d9:12:76:68:a6:5c:d2:2a:68:f7:21:4e:c1:0c:
4c:de:87:f6:c6:e1:3d:bc:bc:ab:8e:64:86:04:95:f4:a5:cd:
73:2c:ad:40:d4:51:53:ac:e8:50:0f:30:bf:ff:43:8e:ad:19:
db:7f:d3:05:fb:39:2b:9f:24:cb:c5:d5:ea:f0:e0:f0:44:a3:
1d:19:3a:43:93:7c:c9:34:af:c9:74:cb:d7:4a:d5:f0:55:8e:
49:f8:f7:b9:03:cf:65:ff:76:56:d1:5e:bb:39:2a:1b:9b:9f:
ca:54:30:21:77:95:8f:34:8a:0f:33:81:83:0d:64:87:0f:c5:
10:8a:c0:37:76:18:4b:f7:e5:c9:08:6d:a7:d3:13:b7:b6:64:
e3:b7:43:36:b3:74:a6:ed:33:00:77:24:a0:e6:39:62:2a:70:
80:31:2c:90:c1:86:11:31:58:65:b8:fe:20:8c:b7:53:0c:b7:
58:18:65:84:0b:a1:f8:7e:13:36:cf:e0:29:cd:2e:89:96:c8:
44:4c:78:be:e3:0f:1b:f8:7c:6b:0c:a4:41:11:bb:7e:bd:6e:
fa:33:71:7b:9c:da:8b:14:e1:2d:a6:dc:e7:18:b2:8e:3d:f5:
78:5f:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:24 2025 by rpki-client