Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6df35fc-bbb5-3327-905c-c31737b7351b.roa
File: c6df35fc-bbb5-3327-905c-c31737b7351b.roa (raw, json)
Hash identifier: vJWj9eDyawDyqFsHG9Ad/jzz+0ozTdx/I32gdAs7eT8=
Subject key identifier: 99:09:2B:0B:4F:FC:97:0B:12:A7:35:23:75:79:67:D4:0B:5C:5B:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0FB03FEE51B9E1DC5A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6df35fc-bbb5-3327-905c-c31737b7351b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.209.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:fb:03:fe:e5:1b:9e:1d:c5:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f5c5192b-cb96-4733-9b2c-075e6f76d308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:11:8a:4a:00:41:7c:d6:d1:9e:33:20:2f:
38:db:81:1c:0c:f1:7c:7d:59:44:19:10:1e:a3:77:
47:88:91:fa:25:b0:c6:c1:96:03:87:9c:33:c6:93:
be:11:c2:50:52:5b:a9:4b:43:78:67:ed:12:1d:9e:
ef:0d:8c:49:29:dd:b8:7c:36:6a:b3:52:ed:fa:4e:
b7:72:92:53:da:33:d5:8b:95:40:4b:4d:1d:5b:a4:
45:95:4f:e4:9b:20:88:dc:e1:d6:d0:ff:ff:3c:31:
f9:4a:33:a4:da:6e:45:45:34:98:d1:52:88:95:1f:
83:d6:c1:11:dd:00:c0:3c:e4:8d:32:ac:21:a0:7f:
46:8f:27:ba:e2:35:3e:5a:25:19:fb:93:46:73:6a:
57:b1:bc:21:0d:e9:a9:d5:73:b5:44:1e:ec:f9:0a:
ab:8d:ef:a1:bb:3e:df:64:0e:ee:75:1e:87:16:c8:
a6:73:8f:70:e8:2f:32:a7:57:85:0a:a7:f1:e4:b3:
9c:ac:cb:ae:96:11:72:29:4b:13:7f:2c:e4:3a:07:
d0:7a:92:65:df:93:7a:4c:de:2e:91:21:74:5c:82:
32:8d:92:67:f0:c3:f5:90:21:08:4a:46:93:8d:57:
1f:07:d9:a3:34:9b:ab:fd:c2:9d:d3:a8:11:43:a1:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:2B:0B:4F:FC:97:0B:12:A7:35:23:75:79:67:D4:0B:5C:5B:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6df35fc-bbb5-3327-905c-c31737b7351b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:ed:fd:99:90:a3:a1:4a:73:f8:07:43:ac:10:00:52:b5:1f:
e6:89:e6:04:76:d8:fe:35:ae:d0:cc:64:2a:21:84:21:1b:9a:
2a:46:b4:72:f4:e2:ae:22:58:a5:c8:17:19:aa:65:d3:af:fe:
1a:b0:53:f5:90:41:3b:ec:e1:93:1f:4d:f6:74:b8:96:ab:9a:
c5:e7:c7:dd:0f:3f:26:01:7e:53:1f:38:37:d7:44:89:2e:04:
93:13:73:cb:5e:d0:8c:a2:14:f5:26:80:8d:f2:1a:6a:e9:4e:
2d:23:a5:96:53:ae:1f:1f:57:19:a4:00:02:dd:3d:56:09:17:
9c:d6:5b:67:48:89:c6:12:56:f5:40:60:e7:35:93:c0:83:ad:
7f:05:bc:32:93:f3:c2:8d:ad:40:c5:92:4c:ef:29:96:c1:e1:
4c:a1:07:22:1a:55:5d:17:ca:7f:8b:8d:ac:aa:5b:f0:83:4d:
a9:bf:ae:a4:2b:8c:e6:45:31:01:19:3f:2f:b0:0a:9e:2d:19:
8c:69:41:44:41:82:84:be:ad:44:a9:be:01:d1:9d:af:c1:08:
c7:0c:cc:6d:6f:43:6d:86:2f:7a:87:b5:38:f8:96:d5:cc:50:
83:47:bd:1f:50:e9:c0:75:72:52:b4:46:61:b3:65:b2:05:4f:
af:69:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:39 2025 by rpki-client