Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49793a29-c52b-38de-ad21-ba935eac8f2b.roa
File: 49793a29-c52b-38de-ad21-ba935eac8f2b.roa (raw, json)
Hash identifier: lalX9/MZxEzKFf6hChbcIWPyu6vX2n2KKmJkrjkxYIc=
Subject key identifier: 63:71:D4:86:2C:6D:42:9F:22:82:AE:E2:3E:AE:53:D2:F0:3C:40:43
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C110EB1C28D4C9B934BD0BB
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49793a29-c52b-38de-ad21-ba935eac8f2b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.22.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:0e:b1:c2:8d:4c:9b:93:4b:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=238267bb-3e40-42e3-8e18-26e0001d4818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:ee:4f:2c:e2:a1:29:c7:92:5e:e3:33:33:
78:df:c5:9f:40:31:16:31:3d:5d:fe:18:33:cd:b7:
99:79:d4:5b:d2:4b:e5:5d:bb:1a:1d:ed:db:3f:5f:
6b:00:90:ed:ba:2c:d2:6b:a2:d9:73:8d:26:c5:de:
a5:d3:38:74:c1:2f:ca:55:5e:f3:41:28:4d:f8:dc:
28:fc:0f:ee:3b:c4:e4:da:74:bd:57:d3:86:68:0e:
09:c9:79:5c:63:6c:ef:4b:8a:4d:2d:67:e1:96:e8:
87:a8:fe:54:75:13:a4:32:9b:a6:86:29:bd:f6:f0:
e8:54:00:cc:3b:ac:fe:fb:90:51:ab:ff:ff:06:4a:
43:22:6f:74:16:42:ea:d6:5a:ae:20:45:da:c7:29:
d5:32:52:c8:b6:08:c1:ed:8c:a7:66:4d:a8:c7:04:
75:5e:61:18:e6:67:29:57:f3:52:9c:82:f5:eb:e4:
03:59:c1:58:b9:bc:3e:7d:86:18:50:7a:06:e8:ec:
0c:c9:cf:d6:4d:40:a9:10:78:6c:5d:b7:db:1e:89:
48:b0:51:f8:a3:18:e8:e4:11:52:c6:eb:25:18:ae:
e8:93:e9:cd:04:3e:a2:29:df:b4:95:6c:10:1e:a2:
2f:ad:70:83:e0:f9:94:47:a2:32:cf:4f:af:70:22:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:D4:86:2C:6D:42:9F:22:82:AE:E2:3E:AE:53:D2:F0:3C:40:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49793a29-c52b-38de-ad21-ba935eac8f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:cb:2f:2b:91:b0:ac:37:bb:00:38:de:28:95:c8:07:4c:5c:
e7:06:db:63:8b:10:40:d9:3b:73:0c:b5:14:74:bb:53:4b:03:
43:12:55:ae:24:03:e8:d3:df:5d:86:6d:4a:5d:84:90:ce:5f:
ff:8c:2d:29:11:b5:c8:40:fb:8c:59:34:37:71:ac:b1:c9:00:
95:92:1e:07:6d:6e:cf:c0:0e:3f:49:ca:bc:7d:ca:0d:e1:b5:
24:3f:00:e8:24:25:3e:23:44:ad:b5:64:12:05:c8:f8:db:f3:
1d:3e:f1:ad:85:b3:de:d2:4b:4e:e4:4a:fc:b9:a0:df:55:95:
68:5c:b8:95:03:c8:94:f3:27:87:e8:60:d9:38:ea:ea:8c:3f:
56:d9:74:52:62:36:90:45:a4:4a:5c:2d:bf:80:d6:13:24:55:
7d:5a:f1:ad:5e:d2:ff:7c:d5:8e:51:9b:d4:bd:07:c9:18:37:
7c:f6:22:c7:af:83:43:b9:09:dd:a3:5a:78:42:0c:83:a1:c1:
b3:65:e7:5f:da:3e:01:8c:56:b1:91:11:36:91:b1:1b:7a:8f:
fa:bb:14:d5:d6:b5:45:5a:95:31:fc:82:28:52:2e:f9:60:cb:
4c:4a:71:59:29:c3:97:21:d0:d1:ae:e6:9d:51:8b:4e:50:fc:
f9:d0:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:26 2025 by rpki-client