Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/338eb018-d17b-3f09-9ca8-3d68350ef166.roa
File: 338eb018-d17b-3f09-9ca8-3d68350ef166.roa (raw, json)
Hash identifier: DdUS12YC61N5kwNWTpt075P/mRYdRG3h9ViHNpO8f00=
Subject key identifier: 32:F7:82:C2:A9:47:03:F2:2F:F6:16:0C:3E:32:2E:36:B7:73:B1:91
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C107B4E7ADEBEAD869A9900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/338eb018-d17b-3f09-9ca8-3d68350ef166.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.197.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:7b:4e:7a:de:be:ad:86:9a:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=51670d5e-5d37-4b1b-a46a-471ca7a4848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:f0:ad:dd:e0:dd:ea:dc:3e:4c:e5:e6:18:
6e:c5:a3:f5:1e:da:95:d4:ca:75:a2:90:3b:22:6d:
64:b6:83:63:13:43:e1:fa:eb:3d:b4:1f:1a:22:77:
c3:f1:ee:38:33:76:66:9c:89:f7:0c:5d:27:d0:2c:
99:0e:1c:c6:56:8c:da:d9:39:fd:bf:bb:08:95:ac:
54:3e:16:bc:91:50:fa:6d:c5:52:2f:4f:a6:93:53:
df:df:76:0f:6f:6a:40:53:19:82:5e:eb:32:48:c3:
5a:94:75:10:da:d6:97:82:3b:d6:63:87:da:32:ed:
26:65:5b:0f:62:8c:4c:a4:bf:b7:b6:28:5f:69:1c:
85:ca:75:ed:f6:37:a8:72:ab:d9:a8:a2:cd:24:69:
fb:fe:11:17:fb:67:cf:e4:55:a9:0a:83:69:87:25:
bb:bd:ce:8c:dd:7a:a5:dd:d6:ad:c5:0f:cf:eb:a3:
d4:f4:8a:9d:dd:3f:5f:f0:f9:e5:ed:08:aa:e5:c5:
62:30:2e:9b:4a:58:60:d9:6d:2c:b1:30:8d:21:d6:
42:47:cb:1c:e9:90:23:e9:0c:58:b2:9d:99:75:5e:
9d:59:aa:32:c6:a3:7b:44:ff:f1:65:9b:7a:e3:ed:
89:56:2d:14:bf:d1:1b:af:c5:d6:53:60:85:50:3d:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:82:C2:A9:47:03:F2:2F:F6:16:0C:3E:32:2E:36:B7:73:B1:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/338eb018-d17b-3f09-9ca8-3d68350ef166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.197.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d0:15:33:dc:6d:60:c9:f5:ba:1d:c4:69:4c:de:04:c6:ae:
31:b4:74:1b:99:da:0f:7e:20:dc:ed:c2:c1:76:01:32:70:69:
f0:33:19:ef:23:d0:3e:33:4e:af:44:eb:11:0f:9c:a0:48:cb:
2c:68:a2:be:a6:db:0a:16:da:d8:66:67:75:40:12:ab:e9:44:
c3:62:b4:7e:e4:9d:de:c8:91:7c:a5:3c:20:6c:02:e2:cf:c3:
34:c1:01:37:93:14:52:1b:e2:55:05:a4:25:1b:36:9f:ee:31:
21:33:26:1c:d6:b9:1b:dc:9b:2f:2d:62:20:55:c4:8d:af:54:
15:ba:b3:e5:8a:3d:fb:9d:ae:e8:d0:6f:c4:d1:21:3f:48:ad:
77:67:09:a6:92:b0:07:12:a8:9c:28:2a:80:bf:62:8f:d8:55:
1b:ff:5e:af:5f:d0:af:fb:70:87:e6:ca:07:e2:4d:b1:03:f0:
0a:f3:ec:5e:51:19:98:41:2b:12:e1:77:59:7c:44:4c:c4:b8:
4b:86:c9:ba:47:11:10:45:ec:8f:ba:db:4f:88:0b:c3:e3:09:
c3:6b:af:31:b7:80:7a:52:59:c8:cd:64:97:2d:19:92:97:d6:
fa:2b:32:9e:a4:54:41:06:ef:47:2f:4b:4d:fa:f8:d1:2f:af:
61:99:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:17 2025 by rpki-client