Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aca596cc-c528-3300-be86-fa9e227d6151.roa
File: aca596cc-c528-3300-be86-fa9e227d6151.roa (raw, json)
Hash identifier: YtXD6YPaWG51kUCkP/M5Xv6t0cuxr0IPg5lFP35zQiQ=
Subject key identifier: DD:9C:F0:5E:7D:99:B5:07:7B:4F:09:0A:B1:0E:03:FE:B5:0F:C8:49
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7443211D4EAAEB50D8C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aca596cc-c528-3300-be86-fa9e227d6151.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.249.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:44:32:11:d4:ea:ae:b5:0d:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e1d0e45c-9667-4b98-b7a2-18ad0e1f7bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:58:07:14:cf:1b:57:7c:a8:db:ff:5d:d5:
93:96:90:67:fc:dd:b8:09:6f:a3:d4:60:ab:e6:c2:
10:f6:61:cb:eb:ff:d7:52:84:45:c1:14:ac:bc:f2:
7d:04:d1:a8:86:6b:46:bc:15:05:58:07:da:74:fc:
db:9e:ae:ae:2c:4a:75:92:bc:71:ca:88:d1:0f:ce:
08:33:e1:6a:b3:14:c0:74:72:c4:69:63:7e:1b:1a:
a9:c1:55:aa:a0:66:28:af:1b:d5:44:3d:81:73:53:
17:c6:0a:64:ce:ed:33:02:fd:f3:52:4b:cb:05:15:
0c:0a:ff:f6:a7:be:72:83:f4:b9:46:3e:1e:20:18:
24:b4:9c:2e:f4:9b:32:2e:75:eb:70:a8:f6:a5:e6:
0f:78:19:18:8b:18:11:31:28:5c:d2:d8:97:4e:4a:
a2:51:3c:cc:96:d1:d4:c5:aa:b7:35:f5:7e:b6:97:
2a:74:c9:80:6e:16:55:4b:a6:a0:b4:6b:60:12:0c:
30:b0:07:67:19:63:a2:d3:73:59:cf:a3:72:05:d0:
62:5d:f4:37:ea:69:75:eb:9c:82:21:8f:44:15:31:
d3:8b:58:02:f5:e1:93:73:76:7e:d6:d6:f2:c1:c9:
d5:74:89:1b:df:b9:14:b3:76:82:70:d6:3e:8e:ee:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:F0:5E:7D:99:B5:07:7B:4F:09:0A:B1:0E:03:FE:B5:0F:C8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aca596cc-c528-3300-be86-fa9e227d6151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3b:97:a7:a9:24:64:a6:28:76:34:93:b4:8a:e8:2c:c0:4b:
ee:d3:02:71:b2:bb:f2:98:b2:6d:3d:ed:84:97:6b:98:e1:cf:
8c:eb:ab:e7:00:fb:54:48:42:5f:e3:80:87:34:99:93:78:63:
1a:06:33:f1:6d:c1:18:9b:2a:f1:06:78:4e:78:2f:ee:55:9e:
86:4f:56:41:8a:82:85:83:e4:19:fd:21:2a:0e:96:b2:ac:f5:
54:bf:cd:eb:5e:90:42:b1:70:b4:49:93:11:fb:09:e5:a1:4f:
7c:0f:a4:b5:da:04:5f:38:43:30:99:8a:1c:6b:e5:16:cf:0b:
b7:24:7f:d1:80:d0:e2:46:fa:d0:f9:d5:44:c7:86:82:9b:2e:
fe:ee:c9:0b:c5:b7:ea:2d:95:be:65:cf:0a:7e:fe:5d:f5:50:
2e:81:07:36:d8:d7:09:28:bc:25:a5:c5:97:c2:b2:cb:3c:9f:
cf:92:54:9b:29:48:33:e9:3b:43:35:3a:98:25:96:6d:df:51:
54:89:c3:ea:2f:c7:df:8f:07:97:83:dd:17:27:a9:b4:a0:f8:
b3:94:b4:6a:55:8d:5d:4d:f7:07:1d:66:9f:4e:3e:7c:ea:31:
2c:b7:6b:7d:87:10:fc:1d:25:52:8f:92:c4:2d:26:c5:09:3f:
2e:8e:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:15:30 2025 by rpki-client