Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40841db0-d598-3e6d-a432-d89607a2437a.roa
File: 40841db0-d598-3e6d-a432-d89607a2437a.roa (raw, json)
Hash identifier: 34zVvpX3CKzT4JDiiakDmoAYHm5rzJt7K3A++N8u9Rg=
Subject key identifier: 78:7F:EA:43:1A:15:DB:42:35:43:B8:12:53:62:54:16:66:4F:3E:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1076E4295F4FB4284682F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40841db0-d598-3e6d-a432-d89607a2437a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.195.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:76:e4:29:5f:4f:b4:28:46:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7ac46815-ff7b-440c-841e-22001f699924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:1a:e4:b7:79:64:0c:7c:d1:1e:dc:cc:fa:
af:2a:62:7f:3c:41:f7:20:fc:c9:e3:9a:af:81:5e:
53:66:a4:53:9d:33:5b:a0:13:07:34:47:21:fe:4c:
2f:ac:f4:ae:31:49:06:83:87:7d:74:cb:27:dd:e4:
46:db:cb:c9:8a:3b:07:18:c8:84:e9:20:a5:a8:e5:
1a:40:78:c1:fd:7a:f4:da:ce:1d:7d:73:60:60:49:
c3:fe:d4:6e:0e:11:a6:d2:d0:45:bb:9d:a5:c5:7f:
a8:a7:3a:3c:14:a1:ba:6b:b0:c6:bc:e1:7f:a0:f8:
3a:9d:ba:82:41:16:e3:28:7c:32:8d:ae:78:cf:89:
7e:4c:ad:e9:df:dc:3a:ce:ff:6a:79:11:84:85:31:
e8:20:74:9a:fe:04:87:a4:7c:43:8a:ee:54:d2:cb:
17:be:0b:02:e8:b7:45:97:83:30:f7:45:61:1d:b2:
94:2e:0a:79:96:e5:d8:4d:ee:92:82:8d:71:d2:60:
73:47:90:fb:4d:6c:8f:c7:01:60:be:49:59:7c:49:
ca:39:c5:be:0d:fa:25:8f:7a:03:5a:21:bb:ba:e2:
91:98:fa:ad:ea:f0:1b:6b:a0:fc:d0:07:3b:05:1b:
40:4d:1f:1a:e6:b7:c5:bb:a8:0a:ca:e0:60:da:f3:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:EA:43:1A:15:DB:42:35:43:B8:12:53:62:54:16:66:4F:3E:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40841db0-d598-3e6d-a432-d89607a2437a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.195.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:ed:03:75:3b:28:6a:be:86:f6:74:69:00:b7:16:b1:4e:9f:
3f:7a:fc:59:40:df:02:fd:bf:3a:0f:15:59:81:81:7e:6a:f5:
23:0c:5e:78:88:70:ea:4f:ac:0b:3f:75:44:c4:ab:09:53:77:
f5:0d:08:4a:a0:00:f0:10:07:05:38:40:03:5e:f0:ad:53:08:
d2:b6:f8:bd:60:e4:98:33:b5:31:2e:34:75:36:91:d4:b9:f1:
e9:d0:12:20:67:a5:03:b1:39:dd:ea:5b:f9:62:a7:db:4b:ca:
cd:fb:88:95:cc:27:56:bc:41:29:f1:83:c5:d4:5f:a5:12:eb:
8d:81:a4:3d:f7:9a:94:83:4f:b3:7f:fe:1b:38:94:98:51:eb:
68:1f:6e:df:59:f8:8f:db:4c:d7:86:08:fe:15:87:8b:28:b3:
22:b6:4b:1e:5b:d9:9a:0e:da:18:e0:99:c6:5e:69:6e:3a:ef:
ff:9b:c8:1e:00:74:a5:a8:89:f1:37:99:d6:70:03:e8:3b:f9:
96:60:df:d0:b7:e6:6c:f6:4a:04:8f:68:9c:93:b5:eb:f8:7d:
16:37:89:24:88:da:f7:c8:02:57:83:99:88:91:75:d1:8f:26:
fe:50:c5:5f:25:91:47:43:b2:a2:f8:73:93:01:0e:d2:04:98:
b2:9d:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:17 2025 by rpki-client