Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/339cf8aa-4be9-3647-a0c3-8e82b7ff8032.roa
File: 339cf8aa-4be9-3647-a0c3-8e82b7ff8032.roa (raw, json)
Hash identifier: Zw6QYW3mwzFSmwdReEM2Zn08FEmwfPyosB9LmHsRKOU=
Subject key identifier: CD:01:28:5E:B4:38:1A:1C:50:CB:EB:03:7B:C4:6D:A3:A9:5C:D8:9C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C120EDE7C3028365739D600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/339cf8aa-4be9-3647-a0c3-8e82b7ff8032.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.198.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:0e:de:7c:30:28:36:57:39:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a4cc98d6-957c-4ae4-8939-865d3acb1806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:18:a1:bf:7b:1f:be:b1:32:c6:85:55:10:
08:d3:66:39:6f:8a:4c:f8:52:50:b6:b8:ea:ee:16:
50:0d:b9:6e:a5:40:23:46:6d:92:66:b6:00:8d:af:
4d:39:2a:4f:11:53:0f:13:8e:98:87:55:91:9b:1e:
77:c1:58:87:14:06:05:3a:35:aa:2b:ce:8c:4e:76:
00:82:c8:81:c2:89:d3:18:5a:10:0b:e2:b5:b5:39:
e4:6d:b9:53:aa:10:66:22:2e:27:d3:e6:83:7f:bc:
5b:c9:b7:6f:e1:04:fd:a2:2f:49:ab:f2:da:7a:3e:
c4:54:08:f4:70:52:90:f9:e4:1d:45:e5:c0:77:b7:
af:ec:04:67:9b:9d:ff:ca:af:55:4b:c2:00:72:8b:
de:61:de:19:97:9d:44:0b:0d:5f:f1:46:54:ba:56:
8d:bb:60:fd:52:81:5a:d4:a6:4d:b9:6f:07:88:70:
82:64:f9:0b:48:76:8d:e2:b1:ea:24:fc:0a:be:ad:
dc:31:48:22:f9:43:5f:0f:3c:5a:41:82:3c:c3:71:
d2:4e:7e:68:89:93:a9:25:c4:2d:cb:37:d5:16:26:
5b:8e:5b:c8:19:1a:c2:2b:9c:12:6f:1a:99:cc:e3:
f0:cf:28:0d:b1:08:d5:f0:fa:bd:e1:72:ba:1e:23:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:28:5E:B4:38:1A:1C:50:CB:EB:03:7B:C4:6D:A3:A9:5C:D8:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/339cf8aa-4be9-3647-a0c3-8e82b7ff8032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.198.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:1d:92:a7:88:34:ad:e0:ec:f4:5a:79:75:9f:6a:9f:af:1e:
49:3f:fb:58:9c:1e:b3:f1:33:28:33:ce:77:f9:bf:8e:dd:2f:
bd:3f:90:07:3c:d8:be:7a:23:a8:04:dd:e5:6e:a6:d8:46:ae:
f4:fd:00:b3:03:80:f2:74:92:b9:67:1e:ff:f8:71:3c:e4:37:
01:15:a7:4c:94:6f:a1:99:48:4a:a9:61:7d:eb:7a:ca:cd:c6:
53:63:c1:32:1d:4c:39:e7:ea:55:ef:1c:9b:20:75:9d:09:ed:
b0:62:2b:8b:3b:a0:b4:16:bc:94:17:db:08:77:57:21:5f:64:
c7:35:d4:e5:c4:45:6e:13:fd:bd:39:31:73:6f:72:ec:f1:2d:
f7:0c:4a:b3:a6:26:0c:fc:d9:7c:89:99:5d:88:5e:c4:87:f5:
02:d2:67:2e:2f:b7:f5:2d:af:5d:fc:a3:e3:68:75:35:97:35:
b8:5a:cf:00:59:f0:52:ab:81:f5:77:dc:c7:84:97:71:35:32:
81:39:1f:74:2f:25:47:8a:f8:5a:e2:56:56:28:41:80:bf:56:
ce:a0:50:5a:87:55:8e:42:9c:ef:12:15:c8:6f:e4:a0:5d:f8:
57:ce:0f:91:12:f8:43:67:93:0a:89:78:7b:0b:3f:b0:60:b7:
98:b0:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:42 2025 by rpki-client