Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0af95033-1c56-34f2-b033-391d3074db56.roa
File: 0af95033-1c56-34f2-b033-391d3074db56.roa (raw, json)
Hash identifier: ZBqFhMUVbZdOuKszHDacL8nzHCKXR7Sim/z/ce2v+O4=
Subject key identifier: FD:DD:7E:D9:E6:77:4D:4D:EB:9F:CC:DF:84:66:82:5E:28:FB:98:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12BF3E0A0C0048F4A5A8B4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0af95033-1c56-34f2-b033-391d3074db56.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.44.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:bf:3e:0a:0c:00:48:f4:a5:a8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0c2cc4b1-69e3-42eb-9628-103ebb846df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:87:c9:3e:0d:2e:c1:40:14:37:5d:8b:f6:
44:87:09:01:a0:34:e3:c5:30:a8:6c:28:f8:45:98:
d9:13:93:f8:58:1b:6d:18:b9:88:fc:99:ad:ee:37:
16:fd:8b:f7:51:7b:43:54:51:97:8d:3d:b7:cf:7a:
ff:f4:8c:9c:54:9e:f9:a1:32:ff:fe:d9:24:0c:af:
7f:23:4d:c2:19:87:d0:97:92:25:bf:38:3e:c1:c7:
ff:22:bd:79:6b:d7:5c:2e:19:ab:c2:0e:49:e0:75:
2b:26:04:28:42:a6:f9:df:50:3b:06:4a:47:52:d7:
1e:15:66:44:33:2e:52:5b:7f:1a:f5:c7:f8:f8:1a:
53:73:f9:91:b9:ff:59:b1:eb:da:1f:8d:68:d5:08:
c3:11:54:ee:0b:43:60:4d:d7:31:9c:a2:d4:ad:a9:
27:22:fe:ac:1c:19:cf:a7:1e:02:b5:13:9c:24:48:
c1:82:a2:6c:62:97:0f:c0:1d:de:24:7c:15:8e:07:
e7:c0:fa:4c:13:6d:e9:29:cd:3b:fa:20:ce:b9:3e:
04:c9:f5:2a:b2:d7:dd:97:2e:03:1a:37:78:3f:93:
19:60:de:d1:b0:2d:94:75:7b:fe:1a:38:9a:b6:10:
56:bd:a3:4e:33:b7:56:af:52:ad:77:62:b2:99:6f:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:7E:D9:E6:77:4D:4D:EB:9F:CC:DF:84:66:82:5E:28:FB:98:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0af95033-1c56-34f2-b033-391d3074db56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.44.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:19:c4:ce:a0:43:a2:42:1e:ab:27:50:61:4b:38:c2:eb:6c:
ba:e4:a2:49:ad:44:6b:44:d5:04:5f:ac:df:fd:54:a8:07:b0:
68:b1:47:21:ac:8d:b2:d4:82:f8:8a:85:35:52:46:37:a7:ed:
39:34:7c:53:80:8c:dd:c7:95:ff:39:28:ad:c1:ad:67:59:3d:
9d:d9:24:23:f7:28:73:7a:f4:1f:5c:de:0d:8d:e7:ea:9b:b4:
18:d9:64:f1:95:87:6f:1c:6c:0d:4a:12:f0:85:d9:45:f8:8b:
32:b4:22:1b:d5:36:ac:2b:09:ee:6c:c2:fd:ab:21:48:24:03:
a9:0d:87:42:37:18:63:c0:4f:c2:bd:80:eb:b3:ea:02:0c:da:
36:5d:a9:51:6f:81:2b:98:6c:62:87:6d:40:e8:ac:32:63:52:
0c:5d:08:78:b6:74:0d:34:c1:67:2f:30:a7:8b:e0:57:37:1f:
74:52:fc:80:55:a9:31:da:ae:9f:44:28:20:40:e0:78:0e:45:
13:4d:02:1c:ab:b3:1d:95:53:6e:bc:45:4a:f1:5e:57:bf:0d:
7b:b4:c1:8d:49:85:22:40:7a:fa:70:06:15:62:00:5b:68:ab:
6e:ae:4d:c7:61:da:14:30:c0:af:62:9f:17:75:db:a9:c3:e0:
9d:f2:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:52 2025 by rpki-client