Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
File: 4875549a-5914-3f98-a0e4-4caa4e08b221.roa (raw, json)
Hash identifier: aZ/vj24sA6D3bUSloqmQOVBKmSqUp0W8YwuW5sC7s+Y=
Subject key identifier: B2:A9:19:DE:29:0D:A7:B1:64:14:9A:4B:1E:A3:DD:3F:75:DC:64:FD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B97D7CE9CBA3BEB8681C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.136.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:97:d7:ce:9c:ba:3b:eb:86:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=21c244f5-1566-4c6d-a0d3-566c09d3152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:39:60:06:f7:a6:98:1f:13:e3:aa:58:fa:
35:0e:ac:a1:2f:4e:52:e0:2c:ac:33:7b:c1:e7:8d:
e1:95:d3:9d:76:9a:70:10:fd:e0:c3:0c:40:92:03:
b6:6e:98:80:9d:bd:4a:75:19:3a:d7:07:be:0d:31:
66:47:ea:99:6a:df:ba:8c:81:2d:48:3c:47:48:54:
a5:e7:67:87:77:fd:60:f8:fa:84:2d:61:c7:83:4e:
e3:7c:cf:4f:79:cf:3e:79:cf:fb:6b:00:fa:55:03:
1a:59:af:fd:3a:63:80:83:91:3f:d0:35:c5:38:22:
3a:13:79:72:cd:1b:e4:6d:74:89:1d:d6:ad:e3:65:
62:0d:5f:1e:d8:19:3a:87:66:0b:ab:06:cf:f9:2f:
d8:d1:63:51:26:b4:2d:dd:30:04:e6:b1:19:77:05:
b9:da:fd:60:a7:2f:6f:22:49:b7:71:a8:06:37:1e:
8b:87:d5:c3:0e:10:f5:71:77:14:53:2d:d0:65:f3:
7e:66:ed:6e:3e:62:8c:6e:de:4b:bc:e4:d3:f6:9b:
23:38:37:d9:5b:bf:be:05:a2:a6:ed:56:aa:a2:35:
de:df:c6:90:3b:ed:b8:c5:82:55:de:a3:f5:a1:da:
49:4a:90:6d:4f:53:43:a6:4e:47:83:65:0a:2d:99:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:19:DE:29:0D:A7:B1:64:14:9A:4B:1E:A3:DD:3F:75:DC:64:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4875549a-5914-3f98-a0e4-4caa4e08b221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.136.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:6e:8a:95:78:f9:f6:66:bc:97:ca:79:cd:9f:00:c1:1d:87:
a3:13:3e:7e:1c:b1:53:0d:26:a4:d4:d5:51:e2:08:24:61:bd:
b8:06:4e:38:78:92:81:25:2c:d8:7f:1a:08:a2:43:42:4d:a5:
86:a7:1e:18:e6:3e:d4:a0:0f:83:67:64:17:a2:bd:6c:71:57:
d2:61:59:63:f4:3a:d0:68:9e:78:fd:eb:5f:e9:65:e2:4b:7b:
02:2f:35:02:69:63:77:03:84:c5:18:ab:97:45:9e:20:6f:6c:
6d:aa:94:fb:f9:15:5e:83:ab:93:72:25:9e:1f:d5:97:93:84:
e3:c8:63:7f:67:ba:a4:f0:66:3c:e0:d4:28:40:ce:71:0d:bf:
44:b8:38:99:b0:4e:a5:2c:2b:00:2d:31:b5:ea:25:55:a9:25:
d1:ff:93:5b:2d:03:b1:17:87:a5:40:2d:30:ff:bf:75:50:49:
2e:52:e4:e4:97:9a:be:28:e6:f8:be:58:e3:66:ab:ac:a0:32:
bc:c3:d8:fe:8c:c2:d7:cf:3b:39:b7:a6:7d:3e:9e:8a:4a:0b:
d0:6c:97:2c:76:3c:7c:f6:86:c5:9b:0d:77:e2:e6:a9:2b:67:
2f:50:b9:4a:15:8c:6d:9e:14:14:e2:42:48:84:3f:9f:76:90:
cc:4f:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:21 2025 by rpki-client