Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9bece7-2b2a-31cd-ab51-010cc97407f2.roa
File: 3d9bece7-2b2a-31cd-ab51-010cc97407f2.roa (raw, json)
Hash identifier: o/JmDLbFudMWzlnud/4+pITczt91ltpBpWorZjP9B/o=
Subject key identifier: 9D:1F:6F:E0:E5:8B:0D:F9:8A:E1:68:D2:A6:BD:80:32:20:2F:30:50
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13DF97F4DA625EF1742D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9bece7-2b2a-31cd-ab51-010cc97407f2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.170.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:df:97:f4:da:62:5e:f1:74:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c1f29beb-61fd-48d8-aa4f-6a91e73da290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:d6:99:be:d6:b0:9f:cd:47:d0:b0:f0:53:
6c:e1:21:9d:3f:50:fd:5a:f5:54:94:84:18:74:cd:
ae:2e:02:40:18:ce:4e:a7:24:cf:28:a9:73:3a:df:
c2:11:02:87:bc:69:08:9f:90:7a:24:ef:0c:25:76:
4d:08:da:25:0b:91:3d:88:e8:8a:cc:50:50:f3:cc:
68:03:67:f8:f6:ac:da:14:2b:dc:5a:0c:31:cc:76:
12:fe:fa:99:43:11:c0:00:53:b6:6e:3a:e1:7f:37:
e9:17:fe:83:15:b1:2a:94:fb:62:d9:2a:48:f5:cc:
ad:67:c2:4e:f8:cc:ca:8e:04:19:00:b6:67:4f:8a:
46:69:3c:7d:5b:b7:f8:ef:03:d7:16:f7:fe:af:30:
79:84:88:23:b7:fe:fc:9a:0a:f4:f7:28:f3:ee:94:
85:ac:53:a8:80:2c:2e:3e:f2:cb:b7:fc:e0:69:4e:
f6:59:26:4a:b9:ca:ef:5b:e5:64:e0:62:93:63:08:
3f:b3:36:0a:a6:17:25:12:fc:ec:a0:bb:4f:02:5a:
9c:99:26:4e:3c:21:ec:1a:a2:1f:10:b1:53:25:79:
16:fb:5a:b9:b0:43:e5:92:99:2a:fd:17:83:46:80:
cd:da:9c:a2:eb:79:be:ba:48:4c:a1:8b:3e:34:fe:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:6F:E0:E5:8B:0D:F9:8A:E1:68:D2:A6:BD:80:32:20:2F:30:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9bece7-2b2a-31cd-ab51-010cc97407f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e8:d9:87:64:92:be:b7:54:22:de:48:1c:cb:74:ab:b9:b8:
c8:c4:13:98:4b:f9:3e:83:83:63:24:11:81:1e:bd:85:7f:17:
4c:8d:a4:9e:60:0d:3d:8e:a7:a5:87:8e:83:1d:fc:18:43:bb:
37:b2:a4:dc:7f:87:bc:0a:2e:d9:cb:ae:61:93:e0:72:38:5c:
a2:4a:2b:f3:f3:92:4d:18:3d:12:19:4c:d5:bf:f8:76:8e:38:
d3:9e:ad:4a:4e:42:49:78:3d:9f:1c:c1:62:af:1f:21:2e:2e:
90:17:47:35:6b:b0:79:02:11:f7:70:53:2d:83:67:5c:c3:19:
54:c0:db:b1:b0:cc:c0:5f:ed:a3:f6:df:c8:cd:5a:78:31:2f:
6c:1c:6f:9e:e3:34:50:95:7e:17:11:a1:63:d3:5d:a4:08:0d:
96:45:5b:94:11:da:0c:43:03:9e:ad:f8:e4:9e:aa:97:28:37:
d1:69:8f:38:5e:d7:02:8a:d9:6a:9c:0e:00:11:44:35:6e:76:
04:87:62:9e:0a:b8:28:6b:e6:82:2d:95:48:f4:42:7c:1f:16:
0d:40:7e:ae:59:c7:cb:ed:4f:a3:9c:25:3f:b1:ed:1a:73:98:
c4:e1:94:95:1b:97:eb:f1:ee:4d:24:0c:64:16:56:61:24:e5:
36:e2:7d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:20 2025 by rpki-client