Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0de31a9d-fb3d-3233-bbab-6ecb835618e4.roa
File: 0de31a9d-fb3d-3233-bbab-6ecb835618e4.roa (raw, json)
Hash identifier: I/4exKFn2zcQBAvQwemhj5lUPdLMvnIHwkiomr/yVi0=
Subject key identifier: 9E:28:B3:8E:D0:17:7C:07:93:41:FC:12:B6:CD:C0:46:E9:B1:48:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11987DEAB2859B49C90D20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0de31a9d-fb3d-3233-bbab-6ecb835618e4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.202.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:98:7d:ea:b2:85:9b:49:c9:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2cf8b17c-4268-4f22-9365-2ff32e2607e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:8b:3f:26:38:ff:81:ce:9d:68:57:ab:f4:
e0:4d:32:42:fe:cf:19:e1:e5:6d:e8:ec:3c:62:90:
b7:02:1f:be:c7:ad:d2:b2:0c:94:25:1d:d7:42:ed:
11:a9:4a:d2:f9:7d:52:f1:7c:fd:3e:c4:eb:a4:d5:
96:df:c3:14:a6:54:60:58:d4:1f:16:13:65:fb:f1:
7a:2a:6b:46:55:83:e7:b2:eb:a5:8e:ac:0d:98:c0:
ff:5e:49:9d:1d:52:6c:3f:14:f5:15:be:9a:43:73:
44:6d:d0:e9:51:57:9e:88:84:39:42:13:72:30:d1:
4e:28:75:d6:f1:9c:6d:9a:56:29:40:11:54:8b:81:
2f:1a:e3:5d:f5:87:5d:5d:4b:b3:1f:8a:e1:00:e0:
eb:13:b4:34:8a:99:b9:83:3c:14:40:f9:29:1e:6c:
4e:ca:36:dd:2d:f7:06:f2:3f:40:02:fb:1f:20:f9:
35:7e:d7:37:0f:d2:c4:d1:88:f7:b7:e3:37:8e:00:
12:02:fe:d4:e3:cf:10:ad:64:92:b4:d3:24:52:be:
98:9f:5c:a8:28:6c:5b:58:13:c1:1d:e7:41:ca:4a:
5d:c0:07:68:ce:5e:20:50:0a:f7:01:81:70:79:89:
53:e1:6b:a9:6a:1e:5b:a8:ea:8a:31:ff:79:61:c4:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:B3:8E:D0:17:7C:07:93:41:FC:12:B6:CD:C0:46:E9:B1:48:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0de31a9d-fb3d-3233-bbab-6ecb835618e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.202.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:5a:f2:4f:be:bf:a6:93:89:8c:dc:1c:cf:14:de:5e:b0:be:
01:87:ff:65:a8:2f:e2:89:4e:9b:22:22:97:10:e4:e4:7a:97:
7a:8a:92:bd:78:44:57:54:a2:c0:32:b3:d7:ab:f0:09:ee:7c:
5c:b0:f4:6d:7a:8d:75:1a:72:5f:99:bb:09:8c:ac:73:55:2f:
9e:38:88:59:c9:0e:0d:d3:0c:67:61:9f:36:b5:35:6b:09:56:
16:aa:6c:be:57:a8:69:bd:24:d3:39:6a:4a:78:f6:10:5a:be:
1b:17:d2:34:f5:48:93:63:e2:d7:72:26:68:6f:eb:ae:70:d4:
ea:25:81:3f:e0:9c:e5:d3:eb:57:d7:20:15:98:9a:5b:07:0d:
cc:d2:39:16:65:9a:28:66:fe:2e:99:c2:5b:d3:33:24:ed:ae:
ce:1e:fc:c1:14:18:93:12:b0:4a:28:c8:ef:9e:02:d5:39:bf:
ed:c9:de:e7:c4:46:16:10:f6:13:c5:67:ed:05:da:ee:dc:aa:
96:37:b1:4e:3c:25:81:af:f9:79:06:c1:8a:ad:e1:8d:fd:df:
79:4c:8c:d4:9e:bd:cb:9d:66:7a:91:e1:af:05:f4:96:77:5c:
95:e3:6b:9a:c1:82:05:63:5c:07:c1:48:61:5f:af:3d:b1:c3:
46:80:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:37 2025 by rpki-client