Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40235da4-beae-3067-b574-2e7c5abe1bb0.roa
File: 40235da4-beae-3067-b574-2e7c5abe1bb0.roa (raw, json)
Hash identifier: u+AnaZWbepxk21GeoP4aPoR+hdrqxnBjU4iAiYuqqJI=
Subject key identifier: DA:24:DD:A1:7F:6B:9C:F6:36:C6:AE:16:4B:80:AE:1B:8F:12:AF:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C111987B1E744856E7CA2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40235da4-beae-3067-b574-2e7c5abe1bb0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.44.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:19:87:b1:e7:44:85:6e:7c:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e6dddeaf-5120-49f2-86f6-43396a7d4ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:75:bf:17:2e:dc:29:de:83:fe:48:e1:77:
f0:9e:83:f4:dd:dd:ab:4d:52:a3:30:98:cb:f5:0f:
59:60:8d:65:10:bc:71:a2:2f:2c:78:67:7e:a0:c4:
a3:3e:da:1c:d5:68:4e:54:98:4b:9e:2a:e9:fd:ec:
48:52:77:a5:db:b3:ff:34:11:e0:33:eb:2c:df:a0:
bf:b9:b4:8d:94:9c:ca:ae:35:05:d3:cf:e5:c5:81:
ae:ec:2b:2a:c4:e2:b3:29:f5:73:45:56:fd:2d:71:
3b:ec:ea:e0:97:a9:90:82:bb:21:dc:00:0c:d0:40:
a2:3e:e1:25:ac:b2:53:4d:d6:75:92:6b:d2:5e:23:
ec:b3:61:99:a6:06:03:0a:f7:8d:6f:3b:42:5e:bf:
e7:fe:40:c0:db:be:b4:20:17:fe:35:97:aa:6e:10:
60:02:d2:ad:59:bb:f1:26:57:26:aa:f7:f3:5f:6c:
7a:ef:73:cf:f3:55:df:cf:1d:1b:30:63:96:5a:22:
06:ec:17:ee:3c:c6:a3:7a:09:9d:c2:3e:83:fe:fb:
ab:96:42:0f:74:55:f0:b8:44:ce:74:55:f0:87:82:
b9:f7:34:46:c0:d0:fb:f8:2f:e5:e9:30:f8:0c:71:
e2:91:71:d0:d3:74:ee:d5:f4:bb:0b:28:fb:0c:7b:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:DD:A1:7F:6B:9C:F6:36:C6:AE:16:4B:80:AE:1B:8F:12:AF:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40235da4-beae-3067-b574-2e7c5abe1bb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.44.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:bc:f9:8b:96:71:ad:63:38:c1:35:25:f0:eb:0e:a4:1a:64:
98:34:22:b9:c4:b1:9b:ed:59:82:c6:13:23:b9:68:66:ce:74:
da:2b:2f:d6:2b:67:4f:2e:0c:a3:09:a8:76:df:72:a0:0c:2b:
34:c8:00:18:49:3e:2d:6f:82:5c:e8:e7:a3:59:0f:7d:8b:9e:
fe:ac:b6:6a:8e:38:bd:f2:1b:dc:d5:70:50:5d:69:78:34:55:
b4:39:f7:9f:0e:6c:00:b5:60:34:0f:57:2a:54:4d:94:f6:2e:
d7:01:b3:34:95:c5:89:0b:dc:40:d4:92:d4:b6:45:3a:10:35:
c0:cd:e1:4e:77:39:40:53:70:cb:1e:a5:85:f9:8f:ef:6f:79:
d1:24:9d:f1:48:06:b8:eb:14:69:c9:d2:58:03:88:58:1f:43:
a9:28:bf:94:93:04:bc:81:2a:5e:84:ed:18:0c:8e:11:82:e4:
b5:33:1f:6c:af:ce:e4:b6:cd:83:3f:91:f8:37:79:73:74:0b:
db:ca:d4:98:00:ae:cd:ff:a6:57:62:2b:e3:fc:09:26:9e:00:
f4:5f:6e:4b:27:b1:ea:1f:6b:a2:55:bc:fa:55:78:63:91:5a:
33:2a:2c:71:61:14:5c:ea:e2:20:e9:36:11:87:76:78:2c:6a:
f5:53:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:11 2025 by rpki-client