Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25410ab9-1ac8-32e7-baa2-cb79194b7638.roa
File: 25410ab9-1ac8-32e7-baa2-cb79194b7638.roa (raw, json)
Hash identifier: eSGEMXSMy+OFkY8nKa4ZfCFdAymzTxHAybMZt6VMt1s=
Subject key identifier: C3:BC:C2:BC:6C:6D:98:FC:7E:43:31:77:6C:0D:0C:F6:23:2F:D7:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C125280A7DF8E27B6DD3000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25410ab9-1ac8-32e7-baa2-cb79194b7638.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 73.196.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:52:80:a7:df:8e:27:b6:dd:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bbf2c35e-968c-46c7-8046-1b1bf3a0e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:7a:cd:21:3f:01:78:97:b5:45:1b:e8:96:
b7:83:5f:94:95:27:74:49:8e:62:66:1f:2f:7f:ba:
9f:5a:21:83:41:1b:df:bb:2f:a8:57:d5:a1:84:68:
d1:04:dd:52:9d:8e:d9:6f:b0:d6:07:bd:2c:39:fd:
63:da:f4:00:23:4b:0b:5d:19:5f:c0:e9:c5:5f:5e:
a0:5e:43:ee:d3:8b:8e:d9:c5:96:ec:ba:44:94:38:
a6:74:92:1e:83:3b:f5:7e:d4:c9:bc:76:7e:74:fd:
78:7b:7f:39:88:11:fe:02:55:8b:0c:35:08:f7:68:
95:f0:82:b9:11:7e:96:4c:b7:64:89:66:53:6b:18:
11:0e:3d:fb:6e:f3:10:3b:f8:c1:84:97:b0:06:23:
e0:76:2c:fd:ad:8c:e0:a6:ab:2e:57:08:6e:98:33:
ca:be:7c:b2:b3:76:6b:84:f7:f6:02:82:ea:19:a6:
64:22:28:4c:f4:6e:ab:a2:83:f6:44:2f:f8:2e:c3:
1c:ac:84:76:6c:66:c6:58:a4:1b:40:e1:1f:b7:59:
15:50:94:c5:76:0d:9c:54:ce:92:f5:ab:79:80:ea:
d5:1c:70:d5:0c:78:b3:73:aa:b6:a7:5f:5f:34:12:
d3:7d:35:13:d3:6d:3c:8c:01:ff:71:ab:08:66:ef:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:C2:BC:6C:6D:98:FC:7E:43:31:77:6C:0D:0C:F6:23:2F:D7:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25410ab9-1ac8-32e7-baa2-cb79194b7638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.196.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:53:08:06:14:70:f6:37:6b:f9:13:d1:5e:ad:6e:57:a5:d7:
25:af:6a:c2:9b:a4:33:13:da:84:1a:95:a5:00:56:d5:ca:6f:
b0:a6:86:11:08:0f:23:92:25:4f:4d:21:87:c6:b5:8b:ba:84:
9b:72:20:bf:c0:3b:4d:a5:16:ab:62:ff:1e:25:0c:09:dd:48:
03:fd:70:cc:c2:12:4c:10:b9:03:9d:d0:22:b8:73:84:60:8e:
f7:09:3d:a1:3b:25:d8:9b:2f:d8:5a:c1:80:63:f1:e2:b9:a1:
a9:ca:4b:c9:22:70:b1:ef:8d:fd:98:7c:42:6f:48:88:59:2a:
fe:66:d5:4f:9c:84:ee:a4:ad:04:24:59:09:17:9b:d7:19:94:
12:83:11:cf:7a:e4:78:24:51:c8:61:ac:fc:e4:53:f2:70:88:
46:12:ce:1e:45:30:fc:c5:3b:43:cc:5c:4a:93:85:6b:df:59:
43:0e:fc:5c:d3:df:07:8a:90:12:69:81:ae:1a:15:ed:4b:95:
7b:77:03:09:1c:83:12:f3:78:99:0f:c1:89:48:c5:30:f1:28:
4f:cb:2c:e5:51:09:c9:6b:67:47:18:82:04:bc:a5:03:b7:be:
5e:32:bd:a8:fa:77:5d:68:42:25:6b:0c:70:2c:8e:36:1a:39:
2d:01:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:49 2025 by rpki-client