Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c1f3ff-e47f-3219-8aa2-e8e0aeb4fc2c.roa
File: 20c1f3ff-e47f-3219-8aa2-e8e0aeb4fc2c.roa (raw, json)
Hash identifier: CyNwj+bQKZ/knrIppzh1c5EKWtxyuWm1GNB4d2qocxc=
Subject key identifier: 04:7D:A8:52:63:9A:4B:87:44:94:9D:9B:3E:FB:2A:27:AB:CF:B1:0E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FE5B4ABBDBAF497C033E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c1f3ff-e47f-3219-8aa2-e8e0aeb4fc2c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.206.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:e5:b4:ab:bd:ba:f4:97:c0:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1d385c41-c7d1-461e-a072-402713e51628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:45:c5:57:a6:18:4f:3a:1e:da:c3:a6:00:
07:42:4c:8e:92:c1:db:ca:58:39:68:55:30:22:74:
f5:d1:37:c7:10:55:36:61:a7:4d:0a:cf:11:e2:a9:
90:6b:d2:82:83:2a:ab:35:6f:1f:1c:03:ae:99:f5:
1f:0a:54:cf:2e:22:8b:ee:89:0c:d3:18:76:d5:ed:
04:4c:54:20:c2:6b:37:8a:77:bb:f5:f1:9a:85:ec:
22:49:d8:7d:67:0f:37:5c:c6:99:4f:06:98:9e:4e:
0b:fe:36:e9:8c:60:a3:5d:6d:51:77:93:25:d1:5e:
9c:63:d4:c0:4f:96:ba:c5:58:4c:bc:c9:f6:5a:1f:
aa:62:fd:7e:af:86:85:c3:1f:17:73:b7:bc:86:e1:
b7:22:f5:66:93:5b:60:17:21:0b:be:0e:18:ce:a0:
a8:f1:06:0c:eb:dc:26:89:c0:ea:19:46:47:7b:e2:
15:b0:f5:97:51:a6:db:cd:6a:12:40:c8:29:02:46:
a3:eb:d4:38:fc:d2:a3:21:55:47:8d:45:f5:b1:0c:
79:98:e1:1b:f7:d5:16:59:27:d7:12:a4:14:16:c1:
f3:1d:c8:78:d7:2b:a3:07:2a:f6:6d:bf:df:2f:11:
a8:a5:88:8c:2a:86:eb:52:48:88:ab:00:28:c5:ff:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:A8:52:63:9A:4B:87:44:94:9D:9B:3E:FB:2A:27:AB:CF:B1:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c1f3ff-e47f-3219-8aa2-e8e0aeb4fc2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.206.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:8c:85:e3:86:fa:b2:90:bf:32:1c:1d:15:bb:e1:8b:cd:67:
3a:a2:74:76:c1:82:37:21:bc:c0:0b:e6:3f:8a:c7:8f:da:a4:
b0:09:72:e7:24:32:82:b9:04:33:12:9a:76:f0:7b:a0:c1:d9:
13:5d:1d:7d:ea:73:39:fa:50:cb:9f:40:28:0e:1a:4e:98:78:
22:c3:31:65:2e:99:5f:b0:ed:2b:2e:25:e2:70:5f:b0:75:4e:
d0:f3:e9:63:48:48:34:91:3b:b7:ae:8d:82:44:87:ed:13:0e:
1c:a3:85:29:64:e4:ba:70:3d:51:2f:e9:50:65:6f:6d:3a:f0:
26:b1:35:86:e7:67:3d:9c:e1:02:fa:51:fd:35:a1:45:e4:58:
56:ee:ce:1e:aa:d3:bf:a5:a5:1c:ad:1f:d6:70:ad:a6:98:18:
54:34:40:4c:48:d0:a0:e6:ce:e8:e1:33:bf:be:8f:20:34:93:
34:e4:2a:40:c1:f3:dd:13:89:b4:60:30:d0:18:f6:cf:bc:19:
c1:2b:87:2e:7a:75:de:e5:c5:86:19:00:ab:a1:06:bd:01:60:
53:49:a5:2e:64:5d:0a:cb:63:7b:8e:2f:b6:cf:9a:09:3d:af:
76:9b:72:36:20:5b:69:10:65:4f:0e:d3:8d:44:71:f4:fd:15:
ad:9c:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:02 2025 by rpki-client