Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6a4847f-44eb-3d0f-91dc-94d0dbcfce59.roa
File: c6a4847f-44eb-3d0f-91dc-94d0dbcfce59.roa (raw, json)
Hash identifier: foSXBhGB6KKYvsKgs57k83xs0NvfJSIQtvJMiCsYZ6k=
Subject key identifier: B1:28:7F:66:0B:FD:3F:67:03:1D:6C:F4:2E:F0:58:21:D3:91:39:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B92DF382F6D14C726BB90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6a4847f-44eb-3d0f-91dc-94d0dbcfce59.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.121.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:92:df:38:2f:6d:14:c7:26:bb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f587dc7a-31b7-42f0-a43f-062a405bbf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:43:09:c0:d3:85:67:d8:50:20:a5:5e:8c:
6c:3b:d8:c3:09:b4:f4:f4:cf:15:9d:d5:63:09:b0:
7c:b6:04:2b:75:c6:10:ea:43:b2:7b:18:5e:9f:ee:
d4:a7:8b:6f:40:ad:9a:05:ee:33:93:4e:d3:65:ed:
77:42:c4:22:52:79:86:b5:cc:8b:e6:42:d3:44:47:
d1:11:e1:53:a6:96:d1:03:48:25:ba:b5:10:cd:be:
87:1a:d5:66:4b:21:13:5f:07:ec:12:76:6f:29:9c:
13:5f:76:9f:9a:3a:31:9b:c1:89:80:aa:5f:2b:37:
5b:b7:97:1c:a1:c4:85:76:2f:bf:dd:84:f0:a2:1e:
bf:58:86:2c:af:5c:dc:88:40:c8:ca:a7:68:9b:d9:
35:81:19:c5:98:44:5a:47:7a:25:6b:de:ac:f4:7a:
4e:e6:77:58:65:87:ce:6a:53:33:50:3f:08:0f:83:
39:1b:07:82:19:c9:f7:dd:7e:31:4c:a1:fc:a5:71:
03:6d:cd:b7:53:2d:39:19:00:fd:ee:39:f8:60:68:
1f:7a:01:53:1e:e2:81:3d:dd:a3:25:2d:70:f8:93:
13:68:9c:23:85:3d:20:12:0f:62:be:f7:6e:af:64:
c1:3e:fe:b7:11:c1:ad:ab:90:81:9c:9b:77:a9:63:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:7F:66:0B:FD:3F:67:03:1D:6C:F4:2E:F0:58:21:D3:91:39:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6a4847f-44eb-3d0f-91dc-94d0dbcfce59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.121.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:bf:2c:42:b9:7e:09:8a:64:70:f1:d7:0b:bf:35:e1:66:0a:
89:ff:0b:3f:9c:2a:f1:b6:16:8b:89:d4:1f:a2:17:c0:ae:2e:
32:bc:98:ce:82:6f:80:75:a9:6a:11:71:9c:c8:c8:fe:06:78:
9d:63:59:d4:82:a2:24:e9:2a:cf:ae:d6:d4:2e:53:cd:0f:21:
01:50:1a:4a:4c:6c:9b:30:e2:51:dc:99:86:3f:38:cd:dd:4e:
2d:ce:74:b2:52:86:33:92:17:5b:74:7f:05:48:86:c6:03:fb:
27:7f:20:0d:59:54:25:50:7c:be:bf:c6:bf:77:b8:79:f8:50:
c1:00:ee:bf:bb:27:5c:30:62:55:e8:c5:53:1f:a1:d8:7d:40:
b9:c1:4c:68:f1:24:74:15:bb:0a:33:29:f8:d0:1b:ae:16:60:
4f:ed:0e:ec:a2:19:a4:f2:45:05:ff:c9:86:f0:45:10:c5:00:
ca:b1:04:4a:bb:94:9c:63:85:54:51:2f:5a:b7:3e:30:2a:ae:
a4:31:13:dc:86:f7:31:fe:b5:52:9c:42:8f:16:d2:fc:2e:74:
62:da:1d:73:f9:b6:17:c2:ab:a7:f9:6a:84:e4:a5:4f:e3:42:
a6:66:ac:93:75:de:9b:af:77:6e:c0:5a:e8:3a:69:42:bd:ba:
6e:b1:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:35 2025 by rpki-client