Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a25df1a-b56c-3d11-8415-85e1c5e1983a.roa
File: 3a25df1a-b56c-3d11-8415-85e1c5e1983a.roa (raw, json)
Hash identifier: GAX5SQ+sQt30hRs9JXn0iI3wZupat9FypnXQOBI7QZM=
Subject key identifier: BA:0C:58:89:29:21:6D:94:03:B5:32:E4:CE:76:D0:74:6E:75:1F:BE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1419D3313E02798190E940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a25df1a-b56c-3d11-8415-85e1c5e1983a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.222.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:19:d3:31:3e:02:79:81:90:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a0d9946a-acbc-48dc-a4a4-c5567dd5f1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:02:dc:ab:36:ae:be:78:3a:9f:5c:9b:84:
aa:1d:3b:94:7f:ec:2c:7c:23:f5:ec:23:2c:a7:c5:
5a:16:70:58:f8:d3:9b:21:20:e0:54:41:2e:22:82:
4e:98:77:df:e5:10:88:b5:7e:49:4d:04:58:0e:19:
f3:3e:6a:0f:d2:cf:53:ca:39:18:da:fc:da:70:50:
80:82:43:54:a6:ab:8a:66:ac:80:94:99:ec:b3:96:
33:50:d2:91:ad:7d:3c:ea:86:18:a7:c0:58:3f:29:
35:3c:88:31:2f:15:90:ef:f4:e7:d3:ed:87:57:3e:
fc:b7:37:88:34:f2:73:e3:c6:db:07:25:74:b1:b3:
1d:71:10:8a:ae:0b:27:63:d3:47:67:4b:50:7f:1f:
da:e2:80:4e:23:52:c5:c3:ff:2e:1a:1f:df:1e:cb:
f2:2e:fa:21:60:7b:1e:a0:10:55:48:9e:cd:66:57:
2d:a8:5f:81:08:a4:be:c4:dd:c7:e6:89:ee:cc:a3:
7b:ae:e3:c3:e4:dc:61:ee:8a:ac:1f:8d:27:a6:0c:
47:83:3c:c4:39:74:9d:ff:85:13:6d:a7:51:b8:39:
4e:00:e6:24:b5:35:50:70:50:49:61:27:34:3f:b6:
22:77:3d:6b:fd:0d:75:cb:1c:fb:b5:d9:e1:e9:75:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:58:89:29:21:6D:94:03:B5:32:E4:CE:76:D0:74:6E:75:1F:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a25df1a-b56c-3d11-8415-85e1c5e1983a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.222.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:6f:fc:7e:05:82:0d:78:a8:17:9e:8c:f9:d8:6c:5b:e7:0d:
f6:00:0a:48:a0:70:4c:b4:bf:32:65:31:29:74:0f:19:20:4c:
d9:20:9d:45:34:34:67:0d:8e:e4:26:4d:7a:c6:0b:c7:81:ca:
d8:73:75:7b:9a:2e:7e:7b:fb:60:59:dc:86:cd:b3:b7:d9:09:
42:ff:a4:9b:b2:43:c9:4a:d6:b0:57:b3:5e:fa:24:85:a2:6e:
b3:df:e0:e5:de:77:0d:1b:cb:d5:d9:e1:35:aa:23:9f:ae:a0:
db:50:e0:b5:4b:da:11:cd:be:83:aa:db:43:ec:79:c9:05:1e:
52:6e:47:1a:44:6b:cf:75:1f:a8:38:b0:a8:09:59:ed:5a:05:
33:80:d9:9a:6c:46:85:4a:07:7d:06:ac:16:9f:ef:43:42:79:
8e:66:e3:a1:bd:a9:ca:a3:dd:0b:3a:f6:99:8c:4c:c7:5f:20:
d6:33:76:37:e8:99:d8:ed:da:da:69:2a:57:50:4e:4f:64:7c:
29:f4:76:93:ed:81:c5:ad:df:c5:3f:d1:2b:ac:a6:63:01:d2:
7d:23:4a:af:b8:23:47:bd:31:41:ad:b0:28:fb:15:d1:40:6d:
84:36:c9:68:3d:2a:5f:ba:46:01:fe:b4:a1:e1:ec:4b:be:31:
42:2f:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:16 2025 by rpki-client