Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c18e599-bcc1-3521-9eac-4ccb53cc48af.roa
File: 9c18e599-bcc1-3521-9eac-4ccb53cc48af.roa (raw, json)
Hash identifier: b0GvVgyvigT/NlAbgpOI9rJ94H1yMYAdqcRvcjY7cnU=
Subject key identifier: 78:1C:CD:43:26:A4:85:81:0E:E3:04:41:4E:A2:81:5B:C5:96:AC:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7BC596DBAD54EB0184680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c18e599-bcc1-3521-9eac-4ccb53cc48af.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 73.18.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:bc:59:6d:ba:d5:4e:b0:18:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b149e1ba-b622-4b5a-a729-9991fcbe4235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:c3:a4:f6:ed:d3:d0:ca:c1:fc:62:f2:18:
d6:29:ff:22:d3:08:1b:5c:f4:9f:e0:c0:5d:83:8d:
8a:f8:ea:e3:ab:8e:4d:d9:f9:90:9c:93:85:73:41:
5d:31:81:7a:97:c6:7c:a0:d4:4b:bf:6f:67:b7:7b:
40:53:03:5d:2b:46:3c:55:b1:71:f0:1a:ad:db:90:
43:fc:9b:cf:ae:43:61:20:12:e7:14:82:98:72:c9:
1c:01:b5:65:85:3f:08:39:83:48:98:83:19:57:64:
60:b3:82:3b:a8:93:16:2d:0b:eb:8b:f4:9a:52:51:
1b:01:9d:fc:7a:78:ea:47:93:0f:39:c7:41:ad:5a:
d2:39:d8:1b:b6:92:8b:82:94:91:72:29:de:81:3e:
d6:ad:f8:28:15:a5:ad:b5:d1:eb:a7:0c:d9:b6:71:
d5:f5:32:3e:e4:4e:56:35:57:4d:36:e9:18:79:8a:
f3:19:36:f4:6c:18:f2:9f:a7:8e:3f:0e:27:53:eb:
6b:3f:5d:3e:1b:57:fa:66:f9:8b:48:63:e9:e6:c0:
eb:89:84:d5:c3:1d:6a:7b:b2:5e:6e:46:48:15:31:
89:0e:df:53:d0:8e:07:54:3b:cd:49:c8:ed:1d:ea:
90:03:13:80:e9:d5:12:48:94:4b:27:d0:9f:52:0c:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:CD:43:26:A4:85:81:0E:E3:04:41:4E:A2:81:5B:C5:96:AC:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c18e599-bcc1-3521-9eac-4ccb53cc48af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.18.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:07:f5:f8:81:8a:82:1b:39:72:d1:b8:a4:ba:d2:38:5e:54:
61:3d:54:60:4f:cc:ff:16:50:3c:14:fb:6c:8e:24:5e:04:2e:
8e:b2:3d:ec:7a:e8:8a:52:f0:48:65:a6:7e:c5:e4:1d:c0:c0:
24:f6:db:68:98:53:33:ca:70:69:85:b1:c8:58:59:55:85:05:
f4:4e:21:1c:71:6f:db:98:8f:06:0f:06:77:06:5d:7e:a1:00:
bb:dc:48:d5:45:09:59:e4:e4:94:54:99:84:7d:63:31:53:67:
fc:01:a1:b9:d6:e8:3a:a1:c0:f6:71:09:17:56:75:8d:50:30:
af:0b:22:de:01:d8:36:65:72:19:53:9f:e9:ee:69:8b:0b:25:
1c:45:ab:de:d1:d9:d3:3e:18:0c:85:18:b3:3d:90:1b:45:d5:
c5:12:f1:4e:26:8b:17:95:6f:42:bc:6f:f2:d0:61:eb:9f:5a:
c9:12:12:b9:09:43:ab:82:d8:aa:59:2b:3c:b9:c3:85:ee:6a:
0c:93:cd:cf:68:a9:1f:43:cc:09:a8:df:57:c7:9f:2d:61:23:
04:21:07:2a:cc:0d:30:4e:76:cd:3e:f8:95:f7:6f:b5:70:3c:
b9:c7:b2:bb:be:6a:37:ad:86:9c:13:b7:d4:44:04:2c:52:1b:
34:fc:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:31 2025 by rpki-client