Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ddae882-1898-3bca-872d-dc6f040aa723.roa
File: 0ddae882-1898-3bca-872d-dc6f040aa723.roa (raw, json)
Hash identifier: ZfKwwVuAXWUMcsSNPsPTLCWPq2xTIGcKdfTj/2vx5lk=
Subject key identifier: 30:33:1E:6B:B4:CB:7A:8C:58:36:61:08:01:10:82:38:25:D0:FB:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13C0DEA0D6BABB48408800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ddae882-1898-3bca-872d-dc6f040aa723.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.158.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:c0:de:a0:d6:ba:bb:48:40:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2aa6cb12-ed73-4cfd-98c9-5b81032fe0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:61:8f:17:de:d6:03:70:f8:02:42:49:72:
e3:28:0e:fd:1b:89:85:24:68:4f:61:7b:2a:1a:98:
63:c1:54:d6:a8:91:bb:bc:07:1b:2e:32:fc:d5:27:
ba:66:a3:9b:c6:b6:7e:7f:2a:0d:7a:89:83:11:d3:
f9:6d:e3:28:75:78:0c:80:4e:80:31:15:68:31:03:
63:77:6c:21:9b:18:66:6b:b7:6d:28:ef:89:f7:2d:
b1:50:7f:0f:38:c3:1d:4e:b3:2d:02:01:e7:69:37:
32:bb:8b:af:de:84:d7:43:7a:ba:b5:76:d7:c1:80:
ab:f1:fe:ba:24:75:4c:7d:5d:f0:81:92:f2:39:a1:
20:9b:83:12:19:da:9c:c0:81:dd:a5:26:3d:89:96:
62:13:76:e9:a6:00:89:25:a6:c0:e5:75:7f:e8:e7:
c1:ff:1a:e5:16:85:a7:4b:47:ee:e7:6a:88:3e:48:
fb:9b:dc:2c:19:f2:33:5f:ac:f3:41:fd:ab:07:80:
37:ef:b4:bd:c0:3a:66:fd:2a:e9:d1:48:e9:1d:c8:
59:3e:0c:8e:83:3f:9c:38:aa:1a:ff:28:07:df:5b:
1c:3a:54:09:d0:57:b6:e9:d3:86:94:95:b6:53:ce:
ce:6a:e4:71:93:97:59:96:cc:b6:e4:db:c4:ff:0b:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:1E:6B:B4:CB:7A:8C:58:36:61:08:01:10:82:38:25:D0:FB:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ddae882-1898-3bca-872d-dc6f040aa723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:e4:7d:ea:9b:d6:4a:52:c7:e2:6d:19:f9:2f:1d:c9:ea:12:
01:16:1a:46:ab:48:d6:b2:1e:74:73:02:88:85:40:bb:51:a5:
20:72:40:a7:78:8a:0e:3e:24:0f:b7:f9:21:2d:19:85:ec:09:
b5:53:77:ef:f1:31:c8:84:0a:9b:d5:b8:13:01:dd:c9:9a:b4:
3a:f4:fa:aa:a1:17:97:02:93:75:03:33:d3:61:33:81:88:96:
88:4e:06:bc:85:d5:f8:b2:a4:e1:ee:86:53:e1:4b:33:5b:aa:
b1:7d:a6:85:1d:b1:4f:7e:fc:1d:99:63:5a:dd:28:bd:71:46:
30:ad:14:e9:60:52:72:a7:64:6f:65:71:6f:52:83:25:9b:de:
1c:19:02:94:58:d3:d4:ce:3d:33:67:c6:5a:4f:78:83:df:97:
a2:06:69:b6:22:b4:16:3e:34:66:bd:c0:8e:8a:41:8c:23:69:
f4:f5:11:f4:30:3a:69:c4:da:f8:a6:47:42:92:10:46:28:60:
af:a5:ae:2c:87:32:e2:6b:17:24:c7:49:4b:0e:f0:c7:10:ab:
40:33:0a:43:3c:16:2e:85:35:a3:bb:03:af:7b:c9:94:df:71:
93:c4:5c:71:40:5b:b9:e5:2c:88:93:7c:2f:f8:a7:88:a1:3a:
07:0b:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:28 2025 by rpki-client