Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d64f5d-b84f-3b7a-9438-7524f1bebc8f.roa
File: b0d64f5d-b84f-3b7a-9438-7524f1bebc8f.roa (raw, json)
Hash identifier: UgsfRCSqXBzzs4QxhY3YyFdvs4cJypNeE22YFfbM7sw=
Subject key identifier: 75:A6:E8:04:BF:33:74:D4:0B:BB:D9:68:96:FB:D5:A0:BC:B9:3D:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F74474BE015D50FBD6DA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d64f5d-b84f-3b7a-9438-7524f1bebc8f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.249.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:44:74:be:01:5d:50:fb:d6:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d9cf7d6e-a977-4452-a95f-6ce4b0d486b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:18:bf:c8:a2:21:10:ba:48:1e:2d:f2:40:
6f:9d:09:70:a4:7d:13:5a:39:7d:9b:5a:d8:04:1c:
fd:ec:b0:9c:bc:3e:75:c4:2a:7f:b1:94:28:cf:d3:
a5:2b:1a:19:2f:7f:80:95:55:09:f9:d1:d9:be:b6:
17:3d:90:5e:f4:52:f5:e1:de:63:68:6e:cd:d7:f7:
b7:af:2e:b3:46:69:a5:58:f2:42:81:da:95:06:4c:
3d:d6:57:bb:5e:30:4b:bb:b6:48:11:6d:7c:3e:2e:
d9:2e:f4:9f:42:2e:06:b8:97:bb:46:27:96:cc:35:
d0:30:e6:3b:dd:21:b2:ed:f4:fb:be:81:0b:b2:d5:
ec:8b:af:cd:1c:55:ed:38:38:f5:65:8e:fc:4e:74:
c0:1b:1a:8d:67:c4:2a:4e:9e:5f:89:ee:0e:30:8c:
35:77:45:45:3f:13:54:60:6c:59:5f:7e:f7:61:d7:
ed:28:06:a5:17:da:61:ea:ef:74:77:21:49:f3:a1:
4c:9e:d7:56:23:a8:62:b8:27:b8:be:34:44:5b:b2:
d5:b9:20:d2:aa:44:37:73:46:1f:c3:47:2e:b3:95:
d0:cc:b9:a7:57:5a:89:0a:0f:70:6b:31:7f:86:19:
96:54:a5:ed:07:18:e4:5b:cc:7b:c2:e9:74:12:36:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:E8:04:BF:33:74:D4:0B:BB:D9:68:96:FB:D5:A0:BC:B9:3D:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d64f5d-b84f-3b7a-9438-7524f1bebc8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:f1:64:dd:9f:01:ab:3f:bf:70:86:4d:50:0d:47:ad:2b:5a:
c9:0a:97:82:07:69:65:cc:d8:04:0a:d3:9d:29:75:e0:54:97:
8c:c7:2f:63:41:d1:cf:c5:5f:bb:67:7c:a2:85:52:04:16:51:
99:a5:7d:e8:f9:09:84:72:c0:08:45:f4:7d:6f:f2:46:b8:85:
6c:db:ab:96:30:bb:56:41:5e:d3:1c:1c:e1:bc:2d:89:d7:e6:
c6:be:17:1d:51:1c:5d:ec:9b:e5:92:ba:e2:eb:52:df:76:9f:
04:35:61:f4:b8:9c:06:f9:94:33:ac:3e:13:7c:40:96:2a:e0:
1d:bc:dd:43:95:60:7c:0c:5f:b4:ee:b4:29:a1:88:bd:43:39:
43:7a:e8:ed:0a:68:a2:ad:0c:29:0a:1f:77:88:26:94:88:a7:
fb:c1:0f:1f:76:22:78:f4:e7:dd:c5:03:fa:9a:24:ae:a7:8c:
4d:43:e6:13:7c:3a:13:84:a5:f2:95:a0:a2:11:9b:eb:c3:de:
04:98:63:45:61:a4:f1:49:84:d2:02:bc:84:1a:a8:5b:88:52:
8a:18:d5:82:09:82:f4:fc:f6:ec:c9:cf:6e:10:4d:22:ae:78:
a8:15:2a:e3:a3:d5:32:7b:b3:3c:34:aa:16:fa:f9:67:fd:dc:
b9:0e:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:19:57 2025 by rpki-client