Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af74272-81da-3db8-83a5-79cfa5206666.roa
File: 3af74272-81da-3db8-83a5-79cfa5206666.roa (raw, json)
Hash identifier: LEBr8Vt8Kn+InUjU7L7PNA0SSw22EO4CbEgw4y00dSg=
Subject key identifier: DE:5E:C7:B0:73:67:C2:39:3A:74:4D:26:59:A9:3A:A5:31:3A:22:0F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FFC1B015A685B570C364C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af74272-81da-3db8-83a5-79cfa5206666.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.32.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:fc:1b:01:5a:68:5b:57:0c:36:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c7696f62-c272-480b-a2fc-0d6bf577345b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:48:d6:97:94:d7:ad:db:9d:cb:88:61:08:
27:8c:26:46:03:11:60:05:37:92:b2:ca:ed:31:2e:
ee:7e:0c:99:41:a6:3c:52:1e:45:37:13:39:21:2c:
fd:ba:ba:a0:3a:0c:9d:ba:9d:a4:d9:36:7b:39:99:
34:a6:c8:e1:bd:5f:97:28:1f:62:96:69:e5:e8:b4:
ce:d2:6d:ab:ab:c4:6c:ab:d3:f7:4b:d5:50:02:bf:
12:05:ab:4f:73:de:52:16:9c:55:91:82:8b:84:ee:
a3:2b:9c:4a:25:f0:9b:3c:df:cd:cc:6d:44:fd:e5:
d3:27:ea:7a:4f:9b:b1:cd:8e:22:69:d6:a9:3e:a3:
a3:b1:ce:3c:80:91:46:71:81:9c:32:9d:45:c5:eb:
07:58:78:e6:77:62:e9:39:37:63:26:a9:0d:6b:4d:
3c:ed:2c:05:43:68:0f:e2:df:18:5d:6e:fc:a7:e7:
23:49:6d:d3:a8:4c:ef:26:89:e8:b2:2a:b4:f2:52:
44:15:0b:47:09:e1:c1:cd:e1:f8:7e:f7:2e:a8:0d:
ab:e4:e0:90:32:77:80:63:39:bd:57:a7:46:4b:c2:
e0:5e:ae:f0:d5:d6:00:2a:7a:71:8f:43:cc:f0:8f:
b7:08:cf:47:57:11:a2:f1:b1:e6:9f:30:29:6c:21:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:C7:B0:73:67:C2:39:3A:74:4D:26:59:A9:3A:A5:31:3A:22:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af74272-81da-3db8-83a5-79cfa5206666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:dd:06:50:de:82:2c:4e:6e:a7:ed:61:d5:80:87:10:3a:ad:
1e:3f:71:ed:6d:a3:d0:5d:94:3b:0c:e2:89:66:4a:47:a4:a9:
af:e2:72:ff:15:c6:11:19:61:81:a1:9d:d4:ee:b1:0b:20:76:
ce:72:42:2f:ac:6f:cc:4f:d0:1b:15:3e:e3:10:45:41:32:57:
2b:2b:f5:51:96:45:8f:c2:33:5e:92:89:d9:85:3c:cb:19:85:
75:bd:07:5d:b9:c4:4d:b8:86:b1:46:1f:4a:6b:54:c1:e3:4d:
a7:2c:e9:25:c4:bb:13:27:37:4e:3b:cb:57:98:64:fb:b7:65:
0a:19:1b:4c:3d:45:a1:84:97:74:87:a9:ec:48:46:ee:8b:f3:
4b:da:ae:c7:4f:85:81:03:56:a1:b2:48:02:ce:48:29:de:76:
8d:06:0b:88:33:a2:15:09:de:5f:65:ef:b9:e8:78:aa:58:ec:
99:74:15:4c:76:1b:87:06:46:a5:8d:02:0f:c3:f2:46:41:fc:
f9:39:80:b6:83:d5:59:78:c7:f5:c5:76:8b:7e:8a:d7:12:3a:
3a:8c:0e:b2:52:25:50:f8:ce:3f:db:9d:a6:93:6c:97:0b:28:
81:bf:ee:c2:36:e7:c1:2e:a8:59:fb:fa:25:f2:22:7f:24:85:
33:67:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:59 2025 by rpki-client