Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbcd48c-8102-3431-acf4-e60dd292bde4.roa
File: 0bbcd48c-8102-3431-acf4-e60dd292bde4.roa (raw, json)
Hash identifier: UBpbl+HcY+aahcH/jIK/18KPy7SZPOJwne+3m+/vy58=
Subject key identifier: 33:DA:83:32:E3:80:82:99:36:04:24:0E:58:87:B4:D7:F9:37:FC:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C106A65440145A1C3D8D300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbcd48c-8102-3431-acf4-e60dd292bde4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.150.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:6a:65:44:01:45:a1:c3:d8:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b6e50ec1-173e-4b39-9f8b-e43c7506f032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:4a:eb:2a:a6:4a:c8:ee:a5:12:a8:e1:bf:
0c:ef:e2:ce:8e:d4:90:0f:f0:92:f6:2f:53:d1:0a:
83:7d:52:c7:48:64:46:c7:99:48:ed:2c:8a:a8:21:
0d:2e:d8:2c:eb:e0:65:44:ea:ff:b5:7a:f3:ad:e4:
09:71:f7:e6:26:5e:b1:80:e3:f5:ab:71:7d:9e:15:
e6:d9:ed:95:cd:df:9a:37:59:c1:e0:8b:d0:6f:3f:
13:d2:9d:48:22:17:13:08:92:92:92:fa:ec:39:28:
97:0d:d5:82:bf:18:95:a3:27:b7:4c:89:4c:db:f8:
e5:29:7b:e3:b2:53:59:db:1f:f0:45:c9:f8:04:35:
37:eb:93:35:5c:86:cc:6d:5d:dd:6d:01:93:09:06:
26:f6:c3:6b:e5:19:99:0c:c2:cd:00:ba:f5:d5:84:
0e:72:c3:a3:b2:68:c5:de:5f:d6:25:79:99:33:19:
69:2b:49:3b:e9:27:8b:0e:dd:1f:b9:8a:74:f4:21:
a7:10:7c:7d:4e:24:68:ca:5d:a6:47:1f:83:48:0e:
cd:ff:5e:3f:9c:00:05:7b:b4:7e:97:54:62:8a:74:
98:26:fa:ca:83:eb:23:7e:0a:23:68:24:1e:5d:f9:
43:08:03:a2:37:46:94:65:2c:e6:dc:f8:30:76:6d:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:83:32:E3:80:82:99:36:04:24:0E:58:87:B4:D7:F9:37:FC:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bbcd48c-8102-3431-acf4-e60dd292bde4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.150.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:33:74:99:5a:e9:d1:b5:d9:93:af:49:5b:9d:55:eb:ce:df:
68:cb:18:69:68:ce:93:d3:d6:5c:77:32:d8:23:f0:38:aa:eb:
b1:8b:ce:4e:0b:26:33:cd:3d:e7:95:bd:7b:67:ab:94:ed:49:
09:4d:15:78:20:49:e1:f9:a6:24:81:03:b6:f1:b1:9b:8f:3d:
55:29:0a:fb:1d:df:b0:dc:dd:51:cb:f3:34:a9:ca:50:a9:33:
fe:56:86:7c:6c:ed:64:e0:e3:1d:03:cc:6a:37:0b:fc:06:a5:
e8:88:63:ea:df:73:e7:55:a3:4f:e0:b5:70:27:bf:bf:cd:b9:
d7:8c:bc:c7:6b:12:1f:21:ac:1d:10:a2:87:5d:3d:41:f0:78:
ad:1e:03:7a:48:13:05:0c:00:2c:23:79:1d:f0:b3:bb:a5:70:
0a:ac:8c:da:48:d5:c0:a4:5d:b8:7d:8e:07:84:cd:2c:62:4e:
5a:4e:3d:b6:a4:0b:96:30:59:d8:04:5a:a1:ae:26:0d:ec:b0:
49:5c:58:b0:51:f9:a3:cb:e4:fb:df:56:a7:99:c6:63:43:4e:
54:bf:54:c2:21:d9:76:33:f9:f5:27:f2:31:ad:74:e8:fd:cc:
62:9e:2a:e5:1c:28:eb:33:59:82:9c:70:b8:68:97:01:5c:36:
15:3e:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:43 2025 by rpki-client