Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a051ab2-efb0-3295-82c1-4fa68b6a4fa8.roa
File: 3a051ab2-efb0-3295-82c1-4fa68b6a4fa8.roa (raw, json)
Hash identifier: aUGbuph+B/xpDadJxotpXkYTuat1MuSPD9lYrKPnZDI=
Subject key identifier: A2:C3:8F:2D:D5:60:B3:20:37:F3:AD:CB:AE:92:B3:66:76:04:00:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1064246B8D3A640E06B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a051ab2-efb0-3295-82c1-4fa68b6a4fa8.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.33.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:64:24:6b:8d:3a:64:0e:06:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=88be5475-a537-47d5-8418-1a5a4ff231f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a7:1f:54:49:6f:1f:a9:cb:8d:eb:8e:b8:33:
a3:33:6a:00:b7:de:06:13:aa:c6:1b:fd:af:1f:f9:
35:da:17:1e:8f:fa:29:0e:45:7f:d4:29:0f:45:d1:
71:78:07:d1:8e:a6:4a:42:a3:f2:bd:8a:ac:05:f4:
4f:ab:79:47:9b:fa:16:a8:b2:4b:67:76:da:0a:57:
97:e9:32:70:3b:af:f7:58:0a:c8:64:27:72:ae:8f:
71:2c:0d:cc:da:d1:90:ae:f1:ab:d9:ff:80:0a:72:
0d:09:16:22:bb:d8:ce:18:da:28:2b:7c:57:4e:a2:
6b:02:bc:7f:66:42:98:d0:11:8c:94:2a:e9:91:4f:
0d:99:4b:6e:69:53:9c:04:97:da:9e:b4:48:bc:34:
9f:01:c5:be:83:00:1b:0c:df:f5:11:18:52:4a:cf:
a7:5b:05:90:92:d6:46:2b:6e:0a:58:27:48:d3:99:
18:c7:81:76:9b:e1:61:59:6d:0f:38:aa:3e:b1:20:
31:3d:f6:33:e0:37:2c:5e:df:10:37:9c:19:f9:30:
bd:a3:6b:fb:f7:bf:3b:21:06:e3:64:8d:59:77:20:
9e:eb:3b:7d:30:e3:e1:d1:43:df:55:73:b9:03:c9:
f3:57:cd:2f:a7:23:5c:49:2f:ee:39:9c:d4:5e:7e:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:8F:2D:D5:60:B3:20:37:F3:AD:CB:AE:92:B3:66:76:04:00:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a051ab2-efb0-3295-82c1-4fa68b6a4fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:23:7a:09:18:63:b6:2a:d3:f6:6f:af:32:97:0f:34:75:ff:
0a:fc:0a:9a:48:b4:af:e3:7d:a1:46:59:90:8c:94:5e:e9:81:
65:c3:7c:86:e3:f4:d0:72:74:8d:e7:b8:2b:98:03:66:97:36:
b1:2b:96:69:19:38:16:58:35:af:96:61:9c:67:58:1b:a3:95:
6f:a5:18:f4:c7:84:b9:0c:5d:cf:2a:42:55:b3:e6:b4:8a:c3:
36:b3:49:2c:8c:51:fe:c3:04:25:47:17:c8:dc:f1:b1:39:75:
a3:2e:42:26:dc:2a:fa:08:14:12:35:58:17:12:04:79:65:1f:
5d:00:73:e5:c5:92:0c:f1:0a:c5:9f:29:82:21:ac:25:bb:00:
3c:46:f4:0a:5f:b5:b1:4b:c1:c1:5e:73:11:b3:3e:4b:e7:ba:
e2:4c:ce:27:44:d1:67:21:b2:8d:f2:c0:90:0e:77:07:5c:16:
48:f8:53:33:63:14:06:5c:78:8e:0e:ce:a6:34:3d:fc:99:dd:
ff:63:99:5b:a9:c0:90:9c:27:e1:0e:1b:73:bc:a0:e2:b5:8e:
bd:cf:9a:bd:b1:c6:b7:69:2b:3c:20:1f:4b:32:e8:b0:8b:d7:
20:19:a1:e1:3e:5a:11:82:8d:d9:e7:9b:10:b8:89:27:b2:f8:
72:a8:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:29 2025 by rpki-client