Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38c64d52-2f19-3286-8af4-920cd0bdfd80.roa
File: 38c64d52-2f19-3286-8af4-920cd0bdfd80.roa (raw, json)
Hash identifier: mxeYKwaM//F2Vu/6r0grMH3ybHW4kurhje7ODYx7MfI=
Subject key identifier: B5:E2:31:B4:B5:6A:F3:E9:CC:C0:11:CB:D5:C5:F0:55:57:27:21:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12BD1743A88F324753FFA4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38c64d52-2f19-3286-8af4-920cd0bdfd80.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.36.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:bd:17:43:a8:8f:32:47:53:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=66ed1d4c-8209-402a-b7b6-0ca281993aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:bc:68:9b:60:1f:a4:cb:2b:4f:2e:cd:fb:
4d:b5:79:74:4a:01:bd:a2:30:86:86:84:25:3b:2c:
a9:d8:7f:83:72:1f:45:2e:70:26:89:3d:0a:e1:84:
36:ba:0f:ef:08:6f:bd:1a:a1:27:16:16:9d:15:3f:
46:4f:8e:e6:41:f9:94:6e:14:8e:54:02:95:42:9a:
fd:19:48:de:bd:f3:79:87:ee:fc:75:37:65:62:2c:
da:c0:c3:74:a3:0c:0f:32:60:72:72:fc:da:f1:f7:
04:e6:3f:5c:f2:70:28:c0:e1:d3:d4:1e:61:f1:c4:
04:47:ee:8e:15:d1:69:40:99:29:df:de:c2:1a:75:
fb:83:90:f2:5b:eb:e1:7f:78:cd:b5:10:f5:17:d6:
62:d4:19:04:5f:02:ff:24:50:a8:33:9f:cd:8a:4c:
ba:11:de:f5:d0:9b:32:cd:f6:8c:2e:86:ac:12:1b:
74:70:8b:61:79:7f:bf:78:5d:bd:d6:5d:23:24:2d:
b6:96:bd:0c:65:21:a3:3d:41:77:a7:fb:6a:f8:af:
66:24:1d:cc:9b:16:5f:e3:77:fe:12:fc:49:35:5e:
8a:9e:18:bd:ca:2d:d3:14:ac:c1:c0:e6:5e:a5:ca:
0c:be:56:d8:4f:d1:80:fe:57:2a:52:36:d4:0d:86:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:31:B4:B5:6A:F3:E9:CC:C0:11:CB:D5:C5:F0:55:57:27:21:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38c64d52-2f19-3286-8af4-920cd0bdfd80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.36.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:3f:39:14:a2:43:02:7b:91:6b:5c:8a:2a:66:3b:84:19:59:
de:a0:4f:05:b2:09:f5:4e:4a:36:19:69:f8:f7:28:62:ba:9f:
91:97:98:09:f7:15:e5:eb:ad:80:0d:88:a3:73:1a:7a:87:e1:
35:a0:22:ea:cb:5f:ec:fa:e9:39:5a:33:22:6a:5a:c6:e4:db:
80:9d:61:7b:ea:ca:66:50:a2:51:b8:b6:5e:b1:d9:6b:92:29:
7f:5f:8a:9c:6c:b7:78:65:2d:21:64:a1:74:5e:e0:fc:cf:a4:
9d:42:e6:c2:b2:4b:c5:c8:05:8d:d9:d5:44:67:cd:61:3c:5e:
d7:6a:c7:18:81:65:af:9a:14:c4:83:cd:7b:99:d0:8e:77:6c:
9a:1c:b1:d8:04:e3:d1:5b:70:25:d8:28:d5:6b:92:4e:de:72:
f4:6a:f0:cc:da:cc:69:e2:60:67:d5:0c:1d:af:aa:f1:98:b2:
b2:7d:56:f6:96:bb:04:09:15:0e:bd:ac:c7:9a:8a:ae:3b:b2:
03:a1:1f:6a:29:e3:a5:aa:51:4c:65:bf:29:d8:1c:42:30:d0:
a1:f6:a1:c1:14:64:97:96:da:8b:59:5e:dd:ec:01:e8:53:a5:
9d:c5:82:ad:07:6c:0b:9f:5a:ef:3f:bf:dc:e0:e3:7c:7d:eb:
fc:e4:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:36 2025 by rpki-client