Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c547d0-bd4d-3a0f-aed5-b796b7d0c3b0.roa
File: 56c547d0-bd4d-3a0f-aed5-b796b7d0c3b0.roa (raw, json)
Hash identifier: fOSec7f0/GoQlQZAoysDdew2wZIxXUipJz1xC/61Dqc=
Subject key identifier: C0:F1:31:DD:EE:44:6D:EA:76:67:03:B9:43:3B:B4:C8:26:EB:AE:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12A7B1EAC3FB4B202FFA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c547d0-bd4d-3a0f-aed5-b796b7d0c3b0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:a7:b1:ea:c3:fb:4b:20:2f:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ef0034da-c1d7-40ed-8296-7b41aec39194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:c9:f9:42:1e:e3:37:3b:eb:b3:59:52:7e:
90:3b:66:f8:ae:bc:a2:03:e8:3c:d7:94:4b:30:fe:
d4:a4:80:88:19:4d:0a:16:6f:9e:94:28:01:54:8b:
e1:64:3f:c9:7c:ec:13:f0:44:49:11:d0:74:85:5a:
d6:38:fb:72:ec:99:a4:f3:9a:58:76:25:77:b6:01:
14:10:84:34:a9:66:da:f9:72:6d:b9:c9:b3:6b:5a:
82:c0:47:8b:79:a8:7d:d6:85:39:85:d3:ba:16:44:
42:f6:36:f2:4f:1f:4a:40:bd:49:f3:b0:48:bf:6b:
cd:fb:1c:98:3a:83:e5:50:fb:a0:10:15:18:7b:72:
03:69:e7:dd:73:4b:6c:68:ac:03:4b:b3:be:93:9d:
f4:b9:f8:a8:42:27:6d:50:86:ce:d4:f8:1b:5b:58:
e1:c4:47:7d:b5:c4:ed:0a:45:c7:7d:90:14:21:33:
c7:c0:ab:6d:06:ed:1e:72:76:ad:21:c5:f6:77:a3:
42:ad:a2:04:60:79:f6:b7:27:8f:04:c7:5f:68:f5:
c3:55:9a:ad:78:26:2a:31:5e:21:3a:6f:ce:14:57:
52:ff:a2:44:02:53:52:15:16:c0:7e:a2:e0:de:dc:
d6:ef:09:7f:99:9e:b0:b3:01:56:a4:00:5f:2c:1b:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:31:DD:EE:44:6D:EA:76:67:03:B9:43:3B:B4:C8:26:EB:AE:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c547d0-bd4d-3a0f-aed5-b796b7d0c3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:65:7a:d3:86:9b:54:b7:37:9b:19:cf:5d:b9:c9:85:97:df:
23:8c:b7:dc:cb:7c:ae:28:48:38:2e:ad:f1:c4:1f:42:bc:d6:
d7:70:38:ac:8e:69:ef:71:ca:d2:7f:70:2d:29:6d:47:6f:ff:
4d:dc:9e:55:2c:c6:5e:73:91:9d:4a:90:8a:fe:83:a2:22:70:
c5:cb:5a:30:e2:8d:6a:e3:bd:9e:58:99:24:02:d9:1f:17:d6:
59:1c:f1:ab:91:84:fd:2a:2c:b8:7e:47:cb:a5:ef:eb:42:f9:
77:f4:88:8e:6e:c3:13:4c:f7:3e:74:b5:0e:4f:0b:bb:78:a0:
d2:44:34:ae:07:f7:85:96:a8:f4:cf:67:9e:12:6d:0a:e2:30:
4a:4b:b2:a9:ff:87:18:ab:06:f9:a5:9c:87:c5:e6:71:ab:1a:
4f:e7:2c:91:66:2b:ea:97:b8:f8:fc:77:2d:8f:0e:8c:2c:db:
76:2a:37:41:36:41:52:48:bd:63:8f:0a:5c:db:f6:f1:40:42:
4a:55:81:b0:12:38:8f:c8:1a:70:df:87:13:4a:52:47:6c:98:
b0:68:ef:9f:b6:75:95:b3:be:a2:d1:72:64:99:a4:3d:19:89:
9c:57:bb:10:aa:d6:a9:1e:3c:19:a8:ef:ec:8d:41:21:57:43:
43:a3:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:02:38 2025 by rpki-client