Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa
File: e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa (raw, json)
Hash identifier: 6gyAeP+UQZ8aPpjY37qf/vzDQe0QcK2CtlPwmf4SN0w=
Subject key identifier: D4:4E:08:BF:18:BE:B8:4D:4D:CA:47:35:89:AC:0F:5B:22:70:06:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEC9C1B6104A1D979C2540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.29.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:c9:c1:b6:10:4a:1d:97:9c:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cd55308e-18dc-4ed5-b794-e5f20d799d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:f1:9e:9d:fa:93:e8:29:18:76:ba:6f:7d:
d3:ec:52:9b:17:fb:26:cf:57:0a:db:95:e5:0e:40:
ec:2c:10:de:ee:09:54:33:e2:27:04:19:5d:a0:85:
fc:c5:90:54:86:ad:17:9f:37:b7:a3:1f:c9:99:3c:
cd:58:ad:9e:f0:86:bb:9b:cf:d8:6e:64:56:c3:d5:
8f:16:26:d4:72:3d:6b:60:d4:ff:ac:c2:65:ae:5d:
67:6a:33:cc:ec:b5:57:50:3b:4d:60:25:ef:2d:22:
72:c2:ff:03:f0:12:89:08:89:75:ca:2e:cc:b4:10:
fc:8e:94:87:82:79:c2:6e:dc:2f:57:7b:d5:86:53:
06:8c:f7:4c:f1:03:ab:ca:4c:fd:0e:b0:46:ad:33:
c7:0e:47:06:05:57:cf:95:d2:90:f3:84:4a:d5:17:
1c:de:fe:c1:78:f7:7c:af:a3:08:b4:8f:a9:26:66:
75:21:f3:53:cf:24:89:f8:7a:b3:3a:bc:34:84:e1:
8c:8b:8f:fd:e1:a7:e3:84:0d:97:fe:0f:96:63:88:
80:ab:ac:0d:f0:3a:a2:5b:7f:3e:be:bb:a3:ff:64:
e0:d4:4e:95:71:5c:fa:a9:26:5e:9c:a4:11:7f:45:
30:c3:1a:28:db:86:ae:56:3a:e0:74:c7:91:7d:09:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:08:BF:18:BE:B8:4D:4D:CA:47:35:89:AC:0F:5B:22:70:06:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.29.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:93:a9:b4:f0:4f:85:85:ff:90:7c:58:8a:b9:1c:5d:e7:65:
94:5e:f7:b6:f3:00:28:76:ad:44:e7:ac:7a:e4:aa:f4:15:c4:
fb:3d:e2:0b:23:b9:a3:2f:67:44:06:82:9a:54:4f:b1:7c:15:
da:3a:c2:f4:00:84:b6:e7:5e:95:04:aa:ac:77:34:15:df:78:
a2:08:17:88:3f:f6:c2:3e:61:5b:82:99:bc:33:ef:4a:47:30:
b3:f9:16:00:58:66:20:98:f2:9f:e2:53:0c:5c:2b:83:d7:5e:
94:b8:ce:7e:99:a5:1a:36:d8:39:80:fc:29:b9:10:af:a9:d9:
c7:40:9d:21:6e:ad:c7:9d:d5:27:d4:90:55:21:5f:fb:3b:fd:
c3:05:67:12:46:17:b7:72:ac:9e:35:23:51:0d:8d:8c:22:dd:
33:d8:b8:2b:b6:1e:cd:30:e0:3a:56:1f:e6:e1:95:1d:f8:25:
4c:ca:a8:0a:0c:d8:06:d9:b5:32:e4:83:c5:cf:15:e7:e4:9c:
06:ca:cb:c3:9a:bd:10:7d:8d:f1:3b:6f:13:c5:2b:71:14:5c:
4a:79:6b:92:dc:2d:5f:f6:c4:e8:a4:cc:2d:5f:70:8c:bc:03:
a5:e1:92:2d:ea:3f:f0:40:51:d2:4f:92:1b:43:a4:73:37:fa:
8f:58:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:45 2025 by rpki-client