Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1d7b11a-5d11-3a49-857c-360f5ef0ebc7.roa
File: e1d7b11a-5d11-3a49-857c-360f5ef0ebc7.roa (raw, json)
Hash identifier: 8cgNdT82U+UEPGi/Ca8iKGRKTgiaGJ4oHd1u1cK/+uI=
Subject key identifier: 56:40:9C:44:BA:0A:D0:F6:8B:C2:5E:C6:0D:A8:8E:A2:B4:1C:F2:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0060F60D18C42BE24EB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1d7b11a-5d11-3a49-857c-360f5ef0ebc7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 73.231.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:06:0f:60:d1:8c:42:be:24:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=c7cec70e-f9a7-4c15-ada1-ca9c03e93714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:64:56:06:43:87:df:cd:3c:18:71:4e:f8:
db:e9:4c:9e:e6:1f:42:79:c2:3c:d7:3d:0c:df:b8:
4c:9e:03:cf:8b:96:39:1b:c4:fa:0c:68:85:e7:e2:
e8:7a:e9:dc:cd:03:79:8a:11:8d:b0:f5:32:c2:6d:
dd:4e:14:cd:0b:0b:69:a0:47:e4:13:b0:16:10:88:
13:31:b0:65:81:17:40:48:7b:a3:9d:02:27:c4:40:
4b:3f:78:af:db:ea:9e:4c:4f:fe:55:74:5e:43:4c:
6c:06:49:b6:4d:e9:40:38:84:83:b3:b4:54:01:11:
bf:08:3a:7b:6a:c2:2d:0b:6d:29:38:99:65:5c:61:
fb:92:67:ab:81:c0:35:91:06:89:d2:52:d5:0a:98:
22:1f:4a:31:05:a3:c1:6f:fd:62:a6:03:7a:a3:5f:
37:12:af:cb:d9:7e:e4:74:83:33:80:1f:33:1a:fd:
1a:1a:d6:51:58:57:84:61:d3:75:3a:8f:11:fc:35:
88:bd:ad:8b:fe:6f:d5:aa:4e:d5:78:f4:6f:40:01:
67:89:fd:39:ac:54:ee:f5:ec:8f:3e:10:e8:3e:fa:
57:a9:72:aa:02:6a:e4:ae:be:0a:20:e2:f2:11:b6:
80:96:2a:75:8f:4e:68:60:6f:01:72:cb:0c:13:fe:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:9C:44:BA:0A:D0:F6:8B:C2:5E:C6:0D:A8:8E:A2:B4:1C:F2:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1d7b11a-5d11-3a49-857c-360f5ef0ebc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.231.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:5b:d7:5b:56:cf:27:42:f7:9d:51:a8:27:e3:d1:19:55:a8:
c9:fa:b1:3c:be:2b:b6:87:f2:0d:7f:e8:bf:c3:c1:89:22:c3:
26:a3:93:8c:86:dc:df:8b:de:ff:a5:f9:4e:54:98:fa:4c:2d:
7f:e1:11:5d:3b:25:59:54:ba:f8:84:b9:84:51:96:48:12:2c:
0a:f3:f3:1e:f9:8b:62:0d:a9:0d:a5:07:f4:80:97:db:32:95:
1b:60:05:ef:87:9a:74:78:3e:49:81:3f:82:f4:ea:58:1e:63:
68:00:30:df:c2:f7:90:69:40:d2:d7:36:f2:69:75:dc:7c:ac:
48:bd:ab:10:cd:a5:b0:59:28:51:b7:27:db:bc:15:e9:bd:96:
b7:00:22:76:6f:9a:65:47:18:13:49:8b:60:68:13:a3:2f:1b:
7e:7e:70:2d:74:17:0f:17:a4:0b:a9:63:ac:06:10:3f:09:5e:
f6:47:9d:4e:17:92:10:6d:36:28:4b:f0:e5:e2:40:cb:90:1e:
ac:4c:55:b3:5b:a8:ed:56:3d:aa:c7:e4:00:4b:19:3e:8d:d9:
1a:ea:5a:e2:7b:f4:db:2a:24:97:3f:a2:07:79:c5:47:b3:2a:
68:c8:33:c0:f4:da:c8:db:c4:5f:f6:a2:8b:87:12:13:15:1a:
e8:00:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:48:50 2025 by rpki-client