Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/402ab59b-2cce-31e4-84b2-4cdd426b3364.roa
File: 402ab59b-2cce-31e4-84b2-4cdd426b3364.roa (raw, json)
Hash identifier: 3ocFi8MEyV4uPxumhXkURU8D7ak6xQioskKKAYRxoIc=
Subject key identifier: C6:A0:AE:76:CA:8E:B3:42:4E:17:11:E7:E9:AB:13:4D:6B:12:00:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12B2FABF99301671F7F9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/402ab59b-2cce-31e4-84b2-4cdd426b3364.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.22.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:b2:fa:bf:99:30:16:71:f7:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=32fb0274-bbb0-4fd9-86d2-8dc80ba1acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:d3:5c:7b:58:97:f7:cb:ec:e8:2c:eb:af:
30:d8:68:73:d0:db:ee:22:40:f4:31:d3:08:b1:99:
ea:27:67:27:aa:2c:06:cf:c2:d0:f0:54:04:b7:8b:
b1:c0:14:8c:8d:86:93:ba:c9:7b:4a:78:ec:6a:46:
67:d9:9c:fd:78:f8:c8:7e:3c:54:0d:07:f6:5d:c5:
33:ec:0d:4b:30:fa:05:f7:c3:03:de:94:c9:ee:36:
4b:ec:fa:82:66:01:24:0d:42:06:27:a3:10:58:2d:
51:88:d6:ce:b6:67:dd:b0:76:d2:1e:33:48:c7:f8:
d2:0e:b4:b8:17:7a:37:3a:3d:9c:3e:50:c9:b1:8d:
ed:85:3f:eb:62:c2:fd:55:aa:89:ff:ac:44:91:7b:
29:54:c0:8c:68:cf:f3:94:83:c4:bb:b1:6a:90:30:
6b:a5:f0:40:bc:e4:dd:de:05:e1:8c:c2:8f:c4:42:
d4:aa:45:23:36:dd:78:71:07:d3:aa:9c:f9:3c:8e:
17:a9:ac:a3:a1:35:db:b0:f3:e2:8f:12:1a:26:f0:
e1:71:4f:a5:19:07:9c:05:7b:1f:a9:58:b8:5b:81:
d7:b2:66:2f:4d:db:3b:9e:7f:2e:23:3f:8f:46:c6:
a7:16:03:93:92:e1:80:5a:f1:4c:c3:6d:dd:d0:04:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:AE:76:CA:8E:B3:42:4E:17:11:E7:E9:AB:13:4D:6B:12:00:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/402ab59b-2cce-31e4-84b2-4cdd426b3364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:be:b0:d7:66:60:f0:73:3e:89:a6:7c:e1:83:f9:b3:cd:4b:
ce:8c:00:e8:81:8b:5c:f8:be:7e:15:b0:8e:4b:6c:61:8e:0b:
de:80:53:bc:d4:b0:4e:ab:7c:a8:30:bc:75:04:d5:90:22:e0:
3d:42:d9:c4:3a:3d:0a:5b:f4:b3:45:2e:5d:0e:3a:22:87:fc:
e9:2c:fa:f7:a5:60:84:b8:6f:31:59:33:73:72:e4:4a:8d:36:
0d:32:05:30:19:eb:be:07:ad:a7:3e:90:8a:bf:c2:f0:cf:bd:
8e:2b:8b:25:89:1b:b7:6c:3e:b5:2a:9b:d8:21:f1:e6:0f:b8:
45:33:09:31:59:24:aa:1a:a8:3c:a4:68:d7:7e:fd:94:13:e7:
67:07:94:8c:53:f5:58:2e:d8:38:42:6f:6f:16:e0:0f:67:6e:
c0:02:2f:4e:29:6a:e9:5b:2f:a3:26:15:71:19:58:3f:24:5f:
c7:30:97:83:06:40:01:35:6b:86:a4:25:68:63:01:6e:5d:6e:
98:4b:6c:de:b6:a9:30:9f:35:fc:99:f0:22:7d:e5:82:a1:fb:
02:1c:54:49:d6:38:d8:42:3b:94:e6:2c:61:6c:a2:e5:79:f3:
58:83:1a:7e:05:ae:cb:38:66:4a:a7:c9:2c:2a:c6:68:1b:8d:
76:e0:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:53:15 2025 by rpki-client