Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa
File: 25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa (raw, json)
Hash identifier: APhiRV2JbxDraYXJZK7I2Bv2XCY+otJjRwXvVliTvDo=
Subject key identifier: 88:9E:A9:95:EF:0D:40:81:18:B9:9A:94:0E:C2:B6:59:ED:F3:A4:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F72778ECE69815018E880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.161.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:72:77:8e:ce:69:81:50:18:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=055413c1-3512-4e95-8a3a-c12ac6b8269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:5b:91:86:aa:20:bf:69:47:1f:cd:96:6d:
46:2b:33:df:6c:75:e6:bd:97:55:62:eb:7a:bf:c7:
38:c6:77:11:9b:5a:d2:d1:34:ed:83:62:d0:1d:81:
37:a9:31:a1:8e:49:66:a7:aa:92:a2:0e:ad:10:dd:
e6:e4:58:56:cd:57:81:fb:f4:2d:a0:73:34:b5:9c:
92:9a:10:d0:b2:f5:21:9e:04:af:90:6e:83:2f:5c:
8f:7d:ca:f0:2f:e3:ce:76:6f:24:d4:c3:8d:6a:9b:
d5:b7:ae:f9:63:67:58:16:81:4b:b8:ea:fd:c9:06:
7d:44:d3:e4:79:27:b1:47:26:5f:35:72:9c:53:be:
74:79:49:b5:08:dd:42:01:80:ef:74:ff:e7:ea:73:
4a:80:27:f3:30:fe:26:92:02:61:2c:5f:e8:a4:2e:
43:35:f9:c6:d4:c8:ff:25:5f:f2:fe:d4:d6:a9:c6:
99:0f:ea:55:d6:58:22:ad:ff:50:4b:9a:a4:cc:3b:
65:af:e7:b1:f1:07:05:d1:8a:39:99:91:70:85:7d:
a5:68:9f:2a:9f:7e:bb:b7:c3:07:ff:48:cb:1e:7b:
91:13:98:a6:1b:8e:c0:26:ee:d8:2b:5a:a4:4e:20:
26:18:34:ee:6e:9e:cb:ab:63:8c:d6:2d:0f:13:8f:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9E:A9:95:EF:0D:40:81:18:B9:9A:94:0E:C2:B6:59:ED:F3:A4:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.161.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:4a:20:33:e8:b7:56:f2:39:3c:87:e4:25:84:61:55:7b:c5:
31:dc:8b:63:72:7e:60:61:da:ed:23:df:cb:da:68:29:a1:12:
b3:b5:50:01:ea:e8:44:33:1d:8a:44:b0:18:e6:f8:1e:44:a9:
84:1f:87:a8:48:ae:2d:33:44:7c:4b:e2:1c:07:88:5e:dd:1b:
68:83:f9:dc:de:b7:bf:66:ce:d9:c0:7e:e4:a5:3a:93:eb:1d:
c4:9d:29:15:8e:79:75:38:c8:79:78:d1:e4:da:f6:b9:95:b8:
db:a5:32:b1:c1:a2:dd:d2:54:bb:14:16:88:e7:aa:64:5f:63:
e7:5b:29:2e:72:f9:5c:19:22:0e:72:4a:b2:19:ad:90:97:f3:
d6:54:a4:8a:c9:a6:21:e6:f9:84:d8:a7:fb:11:61:7a:35:58:
56:df:2d:c2:97:4c:35:61:6d:2a:1f:11:8c:f7:41:3c:3c:6d:
39:86:1e:64:d7:2b:36:5f:5b:90:30:ab:c9:91:ea:37:6b:c2:
87:e8:e5:eb:7f:da:32:e0:45:dd:8d:77:39:2a:9d:4f:d3:5c:
ed:d7:36:e8:ec:cc:95:34:84:bf:aa:b6:8f:86:30:88:ef:f6:
17:24:52:80:9f:72:a8:f3:31:59:4e:b2:08:6c:89:b4:e1:4e:
cd:a7:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:03 2025 by rpki-client