Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e12945-22b0-318f-9885-fb14a7c86601.roa
File: 45e12945-22b0-318f-9885-fb14a7c86601.roa (raw, json)
Hash identifier: KTem/1U5ktPShBmHKnlFMiEmNjmXLEuKd2YRDtMR1dI=
Subject key identifier: 51:3B:14:25:15:DB:31:31:3E:E7:FF:E1:76:21:2B:1C:99:17:50:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C107F4776D14E8684D4F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e12945-22b0-318f-9885-fb14a7c86601.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.199.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:7f:47:76:d1:4e:86:84:d4:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=90d71b20-fe66-41c3-9f69-0da3eb0ea448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:9b:fc:36:ef:6a:a7:f5:d8:4e:33:8b:b6:
33:b9:98:83:2d:6c:45:b4:db:6f:74:f9:b2:99:8e:
8b:cf:b5:67:f5:6a:b9:2e:fa:73:b8:da:7b:4c:39:
38:7a:38:b8:9c:71:8b:0b:21:59:6b:97:99:a5:af:
69:10:eb:e9:0b:c1:ac:71:a4:18:42:95:ed:f0:ec:
90:09:04:cc:04:18:69:12:3c:11:cc:d5:d9:3a:ec:
aa:03:bc:28:6c:21:94:4a:cd:03:22:c2:67:93:d2:
41:20:bb:c1:fe:aa:cf:87:89:db:4b:64:1e:bb:c2:
c0:81:2a:74:f3:ea:7b:ad:15:46:43:76:5d:9e:e7:
f9:61:e1:9d:24:72:bc:c4:73:17:3e:83:89:a1:77:
d5:a2:6d:87:05:ce:64:ce:61:2e:1c:af:ba:68:bd:
02:76:ca:dd:cf:65:ca:5e:e7:23:83:45:50:e6:8f:
3d:9b:95:04:d6:5e:f3:82:0a:a1:fa:9d:b7:d9:1f:
72:de:ad:7a:01:03:c9:05:c7:0b:4e:df:e8:12:c1:
d9:35:50:b9:23:95:a7:f9:31:95:5b:67:b7:7a:2f:
c4:13:65:20:bf:f0:54:e5:ab:78:d1:af:bc:51:07:
5f:98:db:54:11:41:af:c2:59:44:7c:84:b7:39:2e:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:14:25:15:DB:31:31:3E:E7:FF:E1:76:21:2B:1C:99:17:50:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e12945-22b0-318f-9885-fb14a7c86601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:42:7e:89:d0:fc:2f:80:cc:5a:4e:4e:99:c2:81:6d:29:ce:
62:bb:e8:3f:d3:7d:95:23:8b:30:e6:84:26:43:b0:ce:4c:aa:
94:a5:0f:74:b2:7d:c5:74:f6:ca:79:a5:45:b5:5c:59:87:44:
d7:2a:4f:c9:25:77:da:80:b7:ab:a7:c9:44:cf:e1:3e:c8:ff:
c5:87:72:fe:b5:ce:8c:ae:87:48:27:0b:86:80:a1:80:2e:3d:
08:58:29:5f:80:b4:a1:a8:3e:fa:2a:cd:64:70:44:14:74:27:
ce:88:09:72:86:52:2e:08:15:e6:dc:b9:d1:80:59:11:fd:e3:
ea:00:e1:4d:92:6b:8e:85:6c:23:9c:ed:79:6f:8e:a0:a6:b9:
50:21:cf:71:d7:f8:a3:a5:10:29:3a:de:4a:49:1e:76:45:c2:
f0:ab:ef:2a:e7:c6:4b:56:4d:3b:49:58:cd:cd:c6:6f:7e:87:
b2:cc:25:6e:54:6a:23:82:f0:55:b1:b5:9a:99:2c:42:52:f7:
db:97:1e:f0:cd:79:98:b0:2b:d3:62:91:e1:e8:ae:8b:7d:21:
de:c6:bf:41:13:1b:89:e7:dc:ef:61:a4:27:b9:21:12:94:c3:
c8:3b:ab:bd:ff:52:13:e8:00:21:ad:a1:0b:06:b7:08:f9:fd:
62:81:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:36:55 2025 by rpki-client