Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf60b89-4335-3d69-9440-a9ef2e658429.roa
File: 2cf60b89-4335-3d69-9440-a9ef2e658429.roa (raw, json)
Hash identifier: UYFuTTD5sNKaUwO0QjgO4B+bdukp5VcYRFDE5bi0qIU=
Subject key identifier: 83:98:B1:65:6C:95:7B:2F:B1:9D:1C:21:2C:63:56:05:16:70:A4:E1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C107C333A1E262C29923380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf60b89-4335-3d69-9440-a9ef2e658429.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.197.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:7c:33:3a:1e:26:2c:29:92:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=85fc7cfd-9ad9-4731-8d9a-2eba031d3ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:f1:b6:c5:25:05:7e:3d:30:88:81:73:61:
96:2d:3b:f5:77:f7:2d:ef:63:d0:be:39:d0:34:2c:
21:fe:c3:8d:df:66:28:50:8f:32:d1:bc:7d:91:23:
b5:8c:80:71:35:33:08:d2:c2:d7:1e:51:68:8f:7e:
fb:86:d5:7d:75:38:56:3e:a0:ef:be:45:af:d4:07:
45:4c:5b:73:b0:e0:e4:dc:f0:a6:37:0c:cc:66:8b:
ea:7b:12:91:ba:a0:ab:d6:c7:a5:ec:4e:a3:b3:d1:
a2:f4:18:16:d1:0f:a1:36:8b:e9:9e:1e:ec:73:35:
30:ec:80:73:ad:63:26:b7:b2:bc:3c:d1:79:1d:50:
da:92:af:ff:e4:5a:9b:ca:7f:45:1a:ae:78:38:0a:
7e:ad:f2:e3:99:29:8a:15:47:21:b4:dd:7d:3a:8d:
65:04:e7:c2:69:06:ba:34:11:17:da:9e:aa:f5:e6:
51:75:eb:b4:6d:ab:f8:80:ca:66:b9:ec:7b:58:01:
48:95:79:9a:cf:75:07:65:57:99:22:70:3c:2b:f5:
3d:9d:48:26:d6:aa:22:3f:65:bb:38:63:ae:64:c3:
e8:ee:9b:a3:87:96:39:f9:87:6e:ff:4c:cb:0d:96:
94:7d:61:1b:49:07:0a:ad:41:9d:fe:f5:24:3b:47:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:B1:65:6C:95:7B:2F:B1:9D:1C:21:2C:63:56:05:16:70:A4:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf60b89-4335-3d69-9440-a9ef2e658429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.197.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a5:a8:16:11:f6:bc:ee:41:db:b0:36:89:67:d3:50:2b:31:
3a:70:90:56:78:bf:60:81:17:51:16:b3:e5:ef:09:4e:eb:86:
09:c1:9e:e3:75:78:42:66:bf:16:aa:03:b3:2d:f3:f6:44:9b:
cd:c6:28:3d:37:64:df:8f:79:e9:ab:cb:3f:3c:3b:33:66:94:
b6:70:f7:43:18:74:17:9e:d1:82:8f:a7:93:6b:6a:f3:53:cf:
9f:51:64:d0:b8:61:2c:9b:94:37:7a:a2:6a:11:3a:5c:b5:39:
89:48:4f:43:8e:13:7c:54:8f:8e:10:d6:f1:db:a4:a2:2e:a4:
38:84:74:6a:db:5f:13:5a:b2:b5:8c:7c:84:88:7b:24:30:c3:
76:47:d3:4d:f6:4e:8c:fb:28:38:c6:bb:76:e3:83:6c:00:e1:
2e:aa:3d:70:9a:42:bc:b5:f1:e3:4d:60:d3:01:ff:66:bc:c0:
43:77:23:fc:17:d9:d7:8c:a0:fa:8f:86:26:c6:1e:62:e2:62:
9b:80:65:b3:92:ba:12:56:12:e5:10:39:7d:74:a4:5b:c7:bd:
ae:f4:fe:67:ec:f3:60:ac:57:51:db:36:ef:0b:1f:b4:28:66:
df:a5:d8:5e:fb:58:fc:24:fe:f4:b0:f8:71:3a:21:54:bf:3f:
a2:e3:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:27 2025 by rpki-client