Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9649edd-9c96-3088-a7c5-53dca91fc771.roa
File: b9649edd-9c96-3088-a7c5-53dca91fc771.roa (raw, json)
Hash identifier: LwYXkEtyK0uu0vEiXNyXL2cfvMWZGdVFZnR2IojPCag=
Subject key identifier: 1A:97:6A:4C:29:45:92:3B:55:CE:98:80:2C:54:68:F5:4E:86:95:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB10252C91EADC75336CA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9649edd-9c96-3088-a7c5-53dca91fc771.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.211.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:02:52:c9:1e:ad:c7:53:36:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ed4d96dc-360e-4aa1-bc2a-4b37a1fed2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:0c:58:ff:cc:f8:01:3d:07:db:ac:b5:06:
3e:7b:fb:da:9f:fc:f8:e9:45:74:35:13:f2:ad:ee:
59:20:d6:08:32:8d:81:c5:13:da:2c:8b:53:eb:f2:
f8:d4:cf:ba:a5:82:a0:1e:38:b8:86:48:c4:8f:b9:
22:33:73:b7:e2:ca:cc:dd:cd:47:38:17:51:57:9c:
40:df:3d:e8:cb:4f:de:ac:30:42:f8:cc:46:28:4f:
5f:60:26:29:96:52:ee:91:c4:c7:62:2c:8c:61:7a:
81:33:b1:6d:b6:b9:7f:b3:2e:a2:c3:7b:10:99:0b:
83:aa:28:40:8b:c3:b4:a1:d9:87:20:a5:ef:25:d8:
59:ca:76:c3:29:dd:24:21:85:77:08:f0:40:8d:89:
3c:94:45:8f:e8:fb:69:76:4a:42:de:2b:53:36:6a:
b6:6d:10:5e:53:ae:c5:0e:51:80:19:d8:e6:2e:39:
90:49:aa:88:bc:93:78:0c:e9:fd:67:23:a9:21:ed:
f8:60:7f:a9:42:23:c9:92:69:38:05:4d:4f:9e:9e:
97:3b:21:f9:e5:ca:81:0d:88:1e:43:23:47:66:49:
56:9a:e1:6a:31:e8:00:b7:c0:bd:43:57:11:83:e4:
0e:82:a7:75:ee:2e:ab:30:18:60:60:8f:3f:33:e1:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:6A:4C:29:45:92:3B:55:CE:98:80:2C:54:68:F5:4E:86:95:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9649edd-9c96-3088-a7c5-53dca91fc771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.211.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:c7:4f:09:84:56:67:51:3b:9d:16:45:40:35:70:71:95:4f:
c7:a7:f6:e6:c5:89:6e:6b:6e:8f:88:3b:9c:d1:ae:4e:e8:66:
3e:70:af:7d:ec:e9:5d:a1:69:f3:75:1f:8f:cc:c6:76:0c:e0:
44:03:c6:e0:28:dc:4a:34:74:80:2f:e8:7f:1d:3d:13:4c:44:
f9:08:b0:1f:57:c0:92:3d:a9:e0:10:70:b3:51:e1:c6:d5:35:
44:cf:00:d4:36:50:cf:73:af:f3:e6:7e:38:fd:51:25:a4:5f:
5a:62:0b:93:c4:9f:3c:df:8e:be:54:bf:0d:5a:f7:71:4e:6f:
fa:af:d6:2e:6a:2e:b8:bc:d1:c4:71:18:2f:ac:e1:af:f2:86:
cc:7f:f6:27:1e:94:a2:b5:49:20:36:42:b0:65:45:13:ca:b5:
08:e5:2f:7a:b4:ae:a0:5c:4a:da:c5:5f:c7:33:a7:56:83:a3:
69:ac:b6:1d:94:a6:06:34:5a:ab:3d:45:bd:c7:fe:8d:eb:ab:
f1:6f:b2:41:d1:72:8e:aa:a1:4c:10:d5:9a:90:37:8c:e4:ba:
50:df:99:43:0e:3b:44:d5:c9:91:eb:1b:4e:44:ec:64:c5:7a:
f9:8b:a7:27:7e:cc:86:b4:79:8b:45:54:28:95:12:5b:56:4f:
af:81:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:06 2025 by rpki-client