Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb444ec-17c8-344a-b906-4a82e839c0cc.roa
File: 0bb444ec-17c8-344a-b906-4a82e839c0cc.roa (raw, json)
Hash identifier: BNPM7ZCnpIVmlm2mPsRIaGdzHvQUWcf8Jheq0/bqWe0=
Subject key identifier: 7E:57:DF:80:AA:03:22:8A:42:82:F4:E1:2A:CB:E2:4A:CB:1C:2F:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C14017908ED8C4291D59340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb444ec-17c8-344a-b906-4a82e839c0cc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.189.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:01:79:08:ed:8c:42:91:d5:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=899507a7-8797-4b7f-8992-60fb4c1c5845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:9e:7e:45:ca:79:21:58:ea:5c:08:95:95:
c2:79:1c:a4:d0:75:5c:7c:d6:b0:58:86:fb:08:38:
47:4c:90:91:9b:5b:e9:80:cf:8b:1a:9a:1f:62:f6:
51:13:cd:7a:cc:21:45:cd:23:1d:fb:be:d6:dd:b4:
03:f9:cf:a5:ad:b1:61:f3:f3:f9:cf:2e:e2:83:a7:
04:50:29:a3:fc:b0:75:ae:a9:b3:bd:4a:4c:f4:cc:
e7:99:e9:65:30:5b:d9:a2:6b:2a:af:ec:85:17:14:
46:6b:24:93:ad:f6:53:37:24:62:38:09:5e:d3:5d:
b7:68:f7:fe:9b:bc:6e:e1:a1:27:8b:dc:08:30:6d:
a8:86:d0:6d:52:dc:8b:e4:ef:35:bb:10:0d:07:ca:
ce:7c:9b:af:49:7b:fd:70:0f:48:d8:be:a8:18:96:
40:73:77:4d:67:1b:41:e3:13:aa:c3:3d:a0:f4:44:
66:13:11:75:21:39:fa:fd:9f:0d:0f:6c:3a:d7:42:
9a:d5:e6:05:f9:c0:3d:af:c3:53:6f:37:56:5d:0c:
52:07:cc:26:46:55:ff:9c:1d:ad:8f:05:09:1b:1e:
0b:c3:fb:09:66:43:d7:ab:95:66:5f:f1:7c:20:5a:
b8:30:13:8f:b4:54:c8:cd:e7:bb:1c:2e:af:a7:38:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:DF:80:AA:03:22:8A:42:82:F4:E1:2A:CB:E2:4A:CB:1C:2F:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb444ec-17c8-344a-b906-4a82e839c0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.189.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:12:17:32:e2:6e:b1:24:8a:fb:79:af:4a:d4:06:fe:c7:52:
0e:e4:9c:94:6b:d0:b2:5a:65:a3:5d:3a:ac:09:f8:f6:94:44:
98:8b:db:4a:bb:ca:ac:03:ca:bd:a6:06:2a:9e:f1:19:25:2e:
bc:29:4f:06:95:db:32:0d:33:b5:dd:b8:89:a6:c6:74:43:6a:
46:ba:57:71:f5:7a:e8:8d:be:16:53:81:44:a3:d5:9e:0c:31:
0e:41:a9:7f:81:e6:bb:9a:80:3d:16:cf:98:f2:78:5a:6b:b3:
5f:39:a7:ac:23:19:15:fa:dc:11:4d:5e:94:e4:08:79:fd:53:
1c:74:62:59:49:71:f3:03:5b:d3:8e:6d:23:3b:da:71:3c:5e:
26:8a:c8:2f:ba:ea:fd:b9:67:e7:71:f2:f8:7d:03:60:7d:4e:
81:05:16:e6:04:8d:7e:a7:49:b9:3d:f0:b8:e7:60:9c:98:56:
af:91:5f:59:e9:ec:29:34:bb:ec:c0:42:6b:44:22:5b:34:5d:
f4:10:a0:b3:a9:5c:f3:2b:39:68:73:f5:89:97:37:23:cd:f8:
51:fb:0c:af:ec:51:97:10:5b:60:14:8f:78:1a:54:31:40:17:
a4:96:cf:fb:76:9c:81:ef:49:5d:01:d9:62:90:66:90:34:bc:
ce:7c:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:13 2025 by rpki-client