Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa
File: 1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa (raw, json)
Hash identifier: 7QG1k+JiXTgkwplUKtJHimBMqAzqQlmCfL25NTPDv2U=
Subject key identifier: 8F:6F:75:1D:6A:4B:80:FF:9D:FC:5E:9C:8A:3F:30:D0:54:DB:28:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C113005EFE2A60FBA350900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.8.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:30:05:ef:e2:a6:0f:ba:35:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5aa62559-6edc-4fde-8b5f-ff13aee730df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:16:dd:4a:af:d3:85:63:83:88:bc:94:97:
2f:62:62:08:4e:aa:e9:8c:ca:2a:0e:a1:d2:7b:19:
c0:11:2b:64:d3:fd:03:33:2f:0f:d3:b7:5f:09:5e:
95:11:37:f6:d6:fe:74:d6:82:ea:58:af:12:28:11:
95:e7:65:20:42:3c:9c:11:b8:be:8a:21:c1:e4:4c:
bd:fd:04:82:d4:ed:86:24:9a:5d:c3:98:97:17:6f:
dd:b0:c0:a1:88:a9:0b:7f:7b:18:8c:48:e4:6d:8e:
81:de:ad:7c:0b:c0:ad:b3:61:8f:98:a5:45:9d:8f:
f5:bc:cf:f5:9f:56:6e:ce:af:33:4f:4d:6a:d2:7d:
ff:81:e2:a5:af:5b:b6:55:a1:93:e6:f5:b5:95:8b:
a0:ca:d5:f3:3a:83:c6:bf:29:da:44:a3:69:1e:c6:
f1:85:af:fb:7e:f8:29:ef:fd:d3:fa:61:a7:9a:26:
38:8c:8c:f2:4f:a4:78:87:03:4b:3f:0f:0d:5c:95:
48:57:f6:35:de:25:f9:f8:6b:0c:db:58:73:a3:3b:
a5:51:d5:49:ad:50:8e:e9:89:48:c6:a4:49:db:7b:
54:f7:45:71:47:f0:4a:67:0c:bf:fe:82:83:88:74:
da:93:4c:dc:7e:ad:62:a3:e3:6c:c9:0d:19:8f:e4:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:75:1D:6A:4B:80:FF:9D:FC:5E:9C:8A:3F:30:D0:54:DB:28:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dfcd44b-28a7-3902-9d9d-7a2ad9a7fb1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.8.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:52:a2:1a:c2:1d:cb:65:4f:59:19:11:15:24:30:3f:4c:1c:
09:95:ca:69:09:25:55:47:f7:19:c1:09:95:8b:03:87:9a:42:
89:e1:79:4a:88:61:c9:40:18:22:ca:0c:3c:e6:f1:54:7e:7c:
26:97:af:1c:95:c3:73:3d:53:a2:19:ce:f9:43:c0:d4:b0:f4:
19:db:cc:86:db:e7:96:26:d0:ba:ef:46:ca:e5:41:b7:51:e8:
9c:7d:fb:3a:2d:fb:11:d6:d2:c4:96:df:54:49:60:25:69:fe:
80:b5:81:6b:25:ce:36:b9:44:c4:11:bf:8b:64:58:f9:fe:cb:
3d:98:6e:df:66:7d:a5:3b:bb:cc:72:71:82:b9:0a:99:78:1d:
be:03:14:4c:b9:04:67:79:d6:7b:36:3c:23:cc:2b:b0:d1:65:
7e:80:d8:cf:0f:2d:79:b2:d8:93:ea:95:ac:fd:6b:d1:04:d6:
fc:29:a8:90:bf:23:b6:e7:b2:15:4a:d8:16:bd:ba:2c:02:da:
ff:2d:8d:c7:e8:9e:55:da:d6:25:88:4b:82:2b:fc:8d:c3:00:
22:72:a4:57:40:24:15:d7:d3:a0:81:ad:67:01:6c:2f:cf:96:
7f:d2:df:67:4a:d0:ec:f0:13:51:f6:3a:82:c6:c3:8c:da:8b:
e5:63:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:10 2025 by rpki-client