Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5af276a4-70f1-3013-b606-81b02ee54a53.roa
File: 5af276a4-70f1-3013-b606-81b02ee54a53.roa (raw, json)
Hash identifier: 3G8GUUXaJ3wlCa2NAjsLzBsw49aZvNttfVu4MrE3vDE=
Subject key identifier: 93:19:88:3A:FF:00:66:23:D9:44:EC:88:77:FB:2F:BA:6B:28:15:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1044172B3D41505F2EBDE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5af276a4-70f1-3013-b606-81b02ee54a53.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 73.52.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:44:17:2b:3d:41:50:5f:2e:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f4eb3d99-918d-4ea7-9964-c40f4d0e1dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:a1:01:c3:63:0d:54:55:bc:ee:22:b1:54:
ae:14:44:2c:d0:b0:d2:e4:81:6b:76:84:80:76:93:
71:61:f9:12:2b:ae:17:e8:4b:90:12:8a:be:dd:29:
dc:26:e1:d1:a6:c2:28:56:cf:de:9e:5c:fc:44:69:
0f:65:21:97:cc:36:f5:ad:d0:ac:dc:20:20:1f:5a:
20:3e:8b:a1:f1:69:7b:9e:88:53:ed:17:e9:40:ca:
ae:54:97:73:e9:2c:8f:49:cf:24:cc:a9:26:47:9b:
c0:46:10:7d:ff:50:59:38:ec:4f:6c:4e:86:e9:b6:
d3:80:f2:b1:8c:c7:ff:5d:f4:fa:d1:76:be:f0:f7:
f3:4a:99:69:08:58:9a:63:93:82:28:0d:33:eb:c8:
c8:1d:a0:be:09:68:93:bd:06:7e:f6:c5:4e:bc:81:
50:34:ff:0f:82:6b:63:10:b6:e4:cd:86:13:82:83:
44:f3:67:81:4a:76:bc:15:b0:32:f6:20:fd:4f:6c:
62:1d:58:ef:db:c3:45:2a:3f:9f:ba:01:e2:ef:77:
ff:2a:c2:45:6d:7d:94:f8:de:22:7d:03:dc:a8:a6:
c0:1f:b7:8a:52:8f:01:88:56:6a:14:df:0c:fb:52:
4a:50:49:a6:1b:e0:89:0a:58:4b:1a:4e:02:5d:ef:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:88:3A:FF:00:66:23:D9:44:EC:88:77:FB:2F:BA:6B:28:15:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5af276a4-70f1-3013-b606-81b02ee54a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.52.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:eb:dd:b4:39:66:8d:c0:55:6d:b9:2e:de:9d:d8:5b:df:3f:
3d:81:4a:3f:2b:e5:d5:44:da:8e:b7:21:8c:be:8e:6f:b9:61:
bd:6a:a4:2b:10:40:e3:3a:c3:54:c1:fa:1c:55:22:5a:c2:8c:
6a:d2:89:83:64:7e:8e:f9:f3:f1:cf:af:63:13:d0:1a:95:ba:
88:fa:81:10:a3:4f:7f:3d:5b:65:ad:ae:2a:7b:ad:99:06:ee:
dc:d0:85:d3:09:77:57:6e:e4:bd:e1:e2:f0:18:5d:6f:53:49:
28:32:ee:ad:ed:ee:02:ea:93:0d:4a:e7:6d:a4:16:7b:c5:78:
d6:65:e9:c8:c4:36:a6:b6:80:40:e3:7d:9e:80:e7:7a:b7:9d:
15:0a:86:d4:c6:0a:b4:91:48:fb:17:b8:97:3c:5e:0b:75:6b:
71:29:98:af:db:4c:ea:fe:d8:9d:b6:eb:86:ef:c2:62:9b:f6:
39:f3:30:36:8a:47:e2:93:2b:1a:75:94:1a:ea:30:4e:ae:81:
7a:a2:02:54:c4:9c:0a:71:10:f2:2b:9e:c0:66:50:76:fb:d3:
b4:e5:c7:6f:ea:81:33:cd:ec:8c:f5:36:29:45:2c:51:26:6d:
7c:69:14:9d:e0:e5:bc:c9:0f:0a:d5:31:f9:fd:5c:0f:36:ff:
ba:60:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:19:28 2025 by rpki-client