Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf20136e-471a-34a6-b3d7-ab27b10382fa.roa
File: cf20136e-471a-34a6-b3d7-ab27b10382fa.roa (raw, json)
Hash identifier: eyBJpQ1gN6wxKl6i+z4AcOqLgdPmgYx61Fkbrgv1A6I=
Subject key identifier: 99:56:85:D5:2D:06:38:0B:7B:A2:84:95:32:92:42:DE:C7:53:F2:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0AB7766308552ECDD5E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf20136e-471a-34a6-b3d7-ab27b10382fa.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 73.233.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:ab:77:66:30:85:52:ec:dd:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7e2ee164-7e92-4547-9a8d-1778c1a052c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:75:f6:2e:a0:ee:9d:04:2c:1e:aa:f5:1b:
0b:8a:45:5f:9a:75:c1:ec:b2:1d:a8:ad:c3:cc:0e:
5b:7c:bf:79:10:3c:d5:6b:70:40:95:13:ee:52:ba:
47:8e:b3:d0:4e:87:5b:03:e5:d6:da:40:71:c2:da:
6e:61:28:15:48:25:14:8c:fa:29:dc:f2:80:e2:25:
1c:19:96:3c:30:99:0a:99:c6:c7:0f:5b:82:7d:11:
b3:94:e3:df:20:9f:76:57:5e:46:fa:26:a9:2e:05:
f9:5b:d8:43:e2:b2:78:6e:24:8c:07:02:ed:cf:ce:
20:e3:4d:36:8e:6f:6a:15:ea:58:f1:fd:f6:27:27:
9a:52:5d:3d:d3:f7:d5:19:d5:2d:77:6c:02:f1:1b:
a0:df:79:5e:4f:40:fe:eb:5a:e8:33:9a:c0:7a:3b:
a5:32:79:d2:fc:ae:c8:ec:c0:e9:74:59:2e:3c:8b:
c4:93:83:73:89:d9:03:e0:cf:11:d4:de:52:40:86:
2b:89:ad:f5:48:97:19:1d:b0:e4:1d:b6:73:29:99:
e2:f8:0f:74:7d:4e:d1:71:c5:66:b1:f6:1c:65:23:
66:8d:c1:8f:ba:bf:86:55:6d:bc:19:7f:29:21:e6:
1e:9c:a4:5f:cc:32:54:ba:3f:4f:2d:b5:76:ca:cd:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:85:D5:2D:06:38:0B:7B:A2:84:95:32:92:42:DE:C7:53:F2:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf20136e-471a-34a6-b3d7-ab27b10382fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.233.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:34:1e:e8:09:18:be:21:4e:2c:c1:fc:77:72:28:9d:5e:3a:
00:a6:31:27:e4:65:54:80:d4:c6:0b:32:a3:c0:73:60:a3:25:
42:dc:63:eb:30:5c:43:0d:a2:f6:82:e5:e4:b9:aa:40:1e:fd:
82:a2:f7:13:d7:43:73:8a:13:9e:09:1a:7a:72:4c:29:2b:f4:
2d:20:03:67:9e:62:d7:51:19:7c:40:30:11:dc:c5:7d:66:a8:
92:a3:2d:2b:e7:5e:5b:66:f8:27:60:0a:7d:06:40:31:25:39:
9a:e5:c7:5f:dc:3d:b2:91:90:b2:81:87:4c:71:31:d4:d7:a5:
e0:31:7e:63:8d:f7:c5:27:e2:c6:bf:2c:9b:78:9e:a2:4c:e6:
0b:04:4d:d6:01:b1:a4:5e:32:7a:68:34:98:e0:16:ce:7f:f8:
13:13:f9:4c:78:9e:a0:37:70:8c:e0:c0:97:d6:9a:fc:b7:de:
c8:f4:a7:8e:5f:e8:98:b1:17:fa:99:38:af:15:74:c9:52:6e:
5c:d7:aa:3c:48:02:e2:79:6f:09:93:9c:85:18:79:d9:88:3b:
55:c9:dd:cc:41:89:25:9b:19:aa:86:a6:57:16:a1:e6:82:53:
08:d7:3d:6e:73:15:91:2d:37:4b:18:58:99:b5:0c:2b:93:eb:
f0:7f:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:24:02 2025 by rpki-client