Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa
File: ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa (raw, json)
Hash identifier: 7CXsS6U9vsRKkOKkvv4Ycb4a8p1pTPqH/YNULCs2E2Q=
Subject key identifier: B1:88:CB:94:23:72:48:EF:68:60:6A:CC:84:7D:80:C5:3B:B1:6E:B3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DC4F2C960B0C5CC8B7000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 73.65.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:c4:f2:c9:60:b0:c5:cc:8b:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=39a4ba5f-62d4-460e-8f0f-52e825131151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:69:f7:a2:c3:06:6e:b5:d1:3f:1a:65:c2:
bc:dd:c3:8b:72:17:ff:8f:df:5c:76:73:a0:7f:c8:
8e:a5:a1:f6:40:47:3e:6d:19:1d:fc:f0:93:43:0a:
4a:24:c3:cc:de:61:4a:81:ea:36:91:4a:cd:c0:bf:
1a:af:97:ce:b3:19:36:a2:44:3f:bd:d7:4a:cb:34:
d4:4f:4c:70:4c:ee:94:de:b6:50:3c:71:d5:d2:e3:
fa:11:71:3c:56:f3:ba:c2:aa:20:e3:4b:91:3a:ca:
ff:c0:96:8f:ee:4a:8a:39:7a:73:c9:82:a1:48:24:
08:61:07:7c:0b:6d:2e:7c:00:20:16:8e:aa:6e:3f:
a2:72:88:d8:1c:d0:1e:6a:d3:72:42:0e:8d:e7:70:
a5:8d:3a:10:64:41:cd:f6:da:26:61:d8:78:ba:91:
02:02:25:36:b1:60:3b:65:ce:f8:2f:db:bd:78:7c:
12:5c:fb:9f:0c:6b:57:e9:ad:d3:77:97:84:04:cc:
91:94:50:b1:18:14:dc:87:d6:4c:30:75:da:c6:ef:
0c:43:b0:e4:88:ed:57:14:19:12:81:2a:de:be:e9:
96:57:90:f8:a4:2a:26:a8:3d:b4:bf:d4:7a:4b:55:
94:65:9c:16:c6:bc:32:24:a4:19:22:a3:d3:20:8d:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:CB:94:23:72:48:EF:68:60:6A:CC:84:7D:80:C5:3B:B1:6E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.65.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:78:2f:a0:39:60:38:7f:f4:ca:1b:1f:40:cb:f8:c0:07:b6:
30:10:ef:e0:a9:75:05:ce:95:25:71:0a:e9:91:a1:72:a5:11:
2c:f1:87:d0:3c:02:ea:11:b5:fb:cd:dd:92:8b:eb:b9:c8:98:
cb:99:50:6a:6c:af:a6:fa:d0:70:dd:db:d9:29:65:a4:e9:63:
f5:62:2f:f1:a7:4a:4e:aa:bf:be:41:a8:9b:9f:6a:db:18:cc:
e6:0c:bc:5d:a1:33:ad:1a:4a:0f:53:db:f8:3d:31:20:39:68:
45:1e:2f:1a:fa:6e:5b:89:fc:1a:9d:9f:e6:a1:f8:71:b7:f6:
c5:a1:ab:32:23:d0:1e:d2:16:6a:3e:6c:18:f5:5f:c2:0d:61:
f2:1d:51:c0:b8:86:ee:8f:5c:1f:c2:78:10:ff:bf:a9:a7:ac:
2b:2d:0b:61:68:eb:59:6b:a2:15:6b:5a:18:50:10:e5:1b:98:
87:e2:c1:d6:89:65:a8:4a:64:df:f4:e8:66:69:11:dd:ed:25:
83:8d:99:7f:d0:94:a2:74:db:6c:30:34:28:41:80:f4:4b:0e:
26:2e:55:b5:6e:f7:c8:be:06:2f:87:f4:4f:4b:13:bc:d1:c4:
77:5d:b7:1a:eb:66:90:9e:cc:b6:a6:de:61:73:69:17:a2:4c:
d6:13:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:47 2025 by rpki-client