Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a824a31-61c7-3241-af48-eed186f577fa.roa
File: 5a824a31-61c7-3241-af48-eed186f577fa.roa (raw, json)
Hash identifier: MkBXJ7FPw2D0XcL77cylQZhbtFCpeC55V+5IjPzRhy4=
Subject key identifier: 87:26:F1:C1:E9:65:69:F7:32:35:DA:DE:96:4A:A2:61:61:90:75:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AAED8FE23608E1B972B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a824a31-61c7-3241-af48-eed186f577fa.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.25.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:ae:d8:fe:23:60:8e:1b:97:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4a611440-f261-4d8b-b223-772f49a4515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:62:74:52:28:9e:3b:a3:9a:fe:f2:b0:3b:
1c:b9:c5:64:bf:32:d3:3d:01:ca:91:d9:09:bd:38:
68:79:a2:d6:f3:14:72:69:ee:3d:22:f6:21:69:06:
26:b6:97:46:a8:47:3a:66:6b:8c:bc:8e:e6:f0:59:
4c:88:c7:fa:a0:3d:8e:a1:66:71:2e:04:7f:fc:49:
af:4f:f2:d4:3c:7c:d7:bc:dd:7f:41:54:a2:20:cf:
8f:cb:8c:4f:ad:e6:6c:1f:4e:72:24:54:da:4b:c8:
ca:c0:4a:5f:81:5b:bb:4a:cd:77:ab:ee:56:88:9b:
24:ec:a2:56:c9:75:9b:59:dc:81:73:0c:d4:c1:74:
a1:12:96:b3:68:74:56:a7:e6:f0:d2:7a:63:93:27:
14:f8:f3:43:3e:17:3b:0c:e6:d3:93:81:06:41:83:
28:36:b5:3b:61:16:ee:74:95:e0:9c:66:19:f0:33:
16:9b:c4:64:32:5e:29:c2:82:98:50:9c:31:92:61:
dd:7b:9b:3a:92:ad:87:52:ee:1a:fb:f3:c7:a6:ca:
d8:1a:ef:43:22:8f:66:27:cc:50:d8:c2:82:93:e2:
a7:87:d4:9b:e6:84:61:1b:c6:3d:41:93:c4:e3:45:
b9:66:7f:06:3d:c6:22:3f:de:f1:6d:fe:50:23:8a:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:F1:C1:E9:65:69:F7:32:35:DA:DE:96:4A:A2:61:61:90:75:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a824a31-61c7-3241-af48-eed186f577fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.25.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:e5:38:eb:55:e8:66:6f:cb:56:e4:6d:2f:05:17:b2:37:3f:
7d:9a:9f:ce:78:e0:66:97:6d:38:97:c6:a0:dd:62:b6:4e:96:
37:40:88:a5:f2:77:c5:da:c6:ca:f1:13:d0:84:9f:c8:dd:71:
18:5c:2b:51:8c:9a:cd:aa:b6:40:ce:68:43:92:29:f7:44:98:
5c:27:7e:2e:6a:7a:15:76:aa:78:9b:fa:1f:fc:9c:64:1f:6f:
32:10:3f:0f:fb:8a:a5:d2:3e:f7:46:dd:e4:e1:ec:1e:8b:77:
9c:80:a3:46:11:c5:ce:dd:06:d8:56:aa:19:91:2d:70:80:11:
bc:b3:0a:71:2d:b0:b9:5e:a2:2c:89:98:d5:c9:3c:5b:a7:a4:
77:34:08:82:70:2b:1a:0f:18:4b:9e:b5:d7:95:22:2f:bc:eb:
96:d9:82:f9:7a:27:77:f8:d5:6d:83:d7:64:4a:3a:38:c2:23:
49:2a:dc:fc:bc:4e:f1:d8:fa:47:a3:c5:35:bd:ef:9a:73:df:
7f:d4:83:77:e7:05:1c:96:02:3e:8e:cb:0d:49:6c:b9:c4:9f:
55:ff:bd:c2:b2:11:1b:9f:90:eb:99:59:4d:ad:52:d9:5f:89:
6b:ac:b9:1e:e9:be:c4:d3:0c:9c:61:e0:9e:18:fc:d7:1c:cd:
90:6c:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:54 2025 by rpki-client