Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/146afddf-4139-3a16-a345-1dfb88a14042.roa
File: 146afddf-4139-3a16-a345-1dfb88a14042.roa (raw, json)
Hash identifier: 3oF9pc/IwpgqV524TPBkdnLl/aLTkdmxYabz8ocL9b0=
Subject key identifier: D0:C6:31:64:3F:A5:33:22:9E:4C:F0:3E:E7:55:24:0B:AE:51:DF:3E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C119A1B8DD2E0CE6FE8A7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/146afddf-4139-3a16-a345-1dfb88a14042.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.222.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:9a:1b:8d:d2:e0:ce:6f:e8:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8ac2ac3c-51e7-4121-ac18-e4edf8a7fe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:b2:c0:49:72:43:dc:3a:a2:4b:ea:75:06:
6e:65:c8:a4:64:c6:9c:06:0f:4b:ce:e8:b6:9d:78:
aa:6b:a5:cb:77:32:00:3c:53:fc:cd:1e:72:ae:b0:
c6:1e:88:ad:3f:c2:72:0e:bf:c6:a8:f5:c9:ad:e4:
fe:d4:48:37:9d:7e:0c:4d:37:03:00:2f:25:19:72:
50:fc:a4:c6:29:d3:72:e5:ba:21:a5:f8:19:cf:f3:
6c:bd:af:77:55:47:91:b7:e0:22:2e:5d:f4:12:a9:
ff:03:41:15:3d:f2:19:ee:6d:40:af:43:71:5c:13:
3c:a4:71:b0:50:b4:a1:c5:04:66:e1:54:cb:66:e9:
66:7e:0c:a2:78:b1:43:94:38:5b:de:5e:4d:17:22:
fa:20:a1:b8:bb:47:b8:04:f6:b6:e1:95:8c:16:44:
5e:ab:29:2f:0e:18:3a:fd:c5:79:ea:82:1b:8d:fa:
ba:5a:a1:c1:8a:37:ca:09:43:f8:39:2b:3c:32:d9:
96:71:8f:0f:ef:f2:80:f5:f2:26:5f:81:b0:6a:e5:
a8:28:f4:55:3f:ac:89:5c:42:c1:cc:ef:e9:d7:35:
9e:f5:76:05:4c:9a:80:c9:d7:b4:c0:71:90:bb:62:
7b:65:7a:ff:b3:b8:4b:f1:07:65:8f:6a:92:65:a8:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:31:64:3F:A5:33:22:9E:4C:F0:3E:E7:55:24:0B:AE:51:DF:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/146afddf-4139-3a16-a345-1dfb88a14042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.222.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c8:97:16:7c:97:81:0e:a3:42:a0:dd:17:7c:70:c4:b1:6d:
30:01:30:df:dc:f8:27:4c:e1:9f:f3:72:3e:41:c6:25:4f:b9:
c5:4b:5f:9f:b7:fa:e5:4c:fe:b7:cc:b9:5c:28:9e:d1:b2:e8:
10:b0:9b:35:f2:47:de:dd:f7:52:c4:f5:c1:cf:bb:65:56:ec:
a1:01:e9:91:b1:7b:ea:c6:af:d0:97:57:42:5e:fd:c1:a9:43:
ef:d0:8c:14:4a:f9:f1:69:f7:84:e5:27:25:b5:df:58:b1:b7:
9d:db:6a:c0:b2:e7:07:93:a8:c0:76:33:12:92:84:11:84:87:
94:db:91:b0:d7:87:fe:61:15:e0:d3:23:68:58:8c:4f:38:84:
7f:d8:56:3e:78:e3:d1:4c:aa:a3:cd:09:a8:9f:e1:5e:0d:fa:
d7:ae:6d:54:1a:54:7c:c6:74:92:30:a1:e2:17:66:13:8f:e6:
41:5e:d2:52:5e:f9:5e:66:b6:24:b0:72:90:80:4a:57:fb:86:
57:2c:0e:a8:f8:af:87:0e:bf:91:d6:94:61:2e:90:e2:40:67:
4f:19:b9:ae:82:24:83:d2:61:49:80:5f:d6:d8:90:f0:5e:3d:
60:a6:e0:5f:3b:23:c0:c2:b2:09:b5:e0:08:d4:3a:f8:30:33:
dc:c3:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:57 2025 by rpki-client