Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b8e7884-5aa2-37f3-b203-b773aff5b027.roa
File: 5b8e7884-5aa2-37f3-b203-b773aff5b027.roa (raw, json)
Hash identifier: xdNKsjWb/X/CKX/ite/PWD3JESIF9XsJUXYCYaeIlNs=
Subject key identifier: 4C:36:3E:14:E2:53:BB:8F:C5:FF:7A:1F:82:1C:4D:2B:E8:E5:1C:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C147E5EB719CF558B1D2580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b8e7884-5aa2-37f3-b203-b773aff5b027.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.71.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:7e:5e:b7:19:cf:55:8b:1d:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=db48ba7e-b515-4f1d-a04b-994f62efe090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:49:08:05:f2:99:58:02:a0:f9:47:dc:c7:
55:95:2b:84:d3:39:8f:ab:c9:67:06:82:b1:c4:46:
48:81:06:f1:e1:65:8b:f2:0d:8a:10:c3:e2:c3:3c:
2c:0b:26:93:04:47:f4:b7:c8:ca:ea:21:e8:5a:0f:
d1:fc:f0:f3:e6:e8:be:29:28:b1:bb:2b:99:f2:88:
d8:da:77:16:28:10:1b:59:64:1e:30:32:93:06:c8:
d3:11:75:09:a8:18:3f:41:95:c7:e7:74:d4:96:65:
b3:73:6e:cb:9b:69:29:38:73:b1:57:6d:16:41:5e:
23:9e:eb:71:e2:c3:38:6a:34:f5:99:2a:7c:05:e7:
75:38:43:ad:45:0c:7f:98:f6:c6:54:8d:15:a5:ba:
80:4c:59:81:3b:8c:41:d9:44:7b:1f:b7:59:8d:9a:
c4:86:9c:0b:49:cd:7f:a7:67:b6:7c:4e:8e:50:23:
87:f6:c6:52:c2:37:0a:3a:c2:98:a2:d5:7a:da:98:
a7:99:3d:f3:b9:e5:a5:f2:62:a4:bf:05:a5:c3:f5:
33:39:96:ff:1c:77:c4:b6:99:a0:35:67:7b:42:d6:
59:85:40:cd:a7:44:70:f4:99:d5:2b:23:a3:09:d6:
14:d3:ca:94:5c:be:f7:84:33:ca:d8:f5:b1:55:fa:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:3E:14:E2:53:BB:8F:C5:FF:7A:1F:82:1C:4D:2B:E8:E5:1C:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b8e7884-5aa2-37f3-b203-b773aff5b027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.71.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a0:25:dc:75:5d:a7:9d:53:a0:f7:1d:dc:40:20:83:72:d1:
f4:3c:35:a8:79:a4:65:98:36:6d:f7:12:d9:65:86:26:e6:8e:
54:2b:45:e7:f2:96:d1:0a:d3:27:f7:5f:38:3c:18:19:e1:e4:
49:bf:74:e8:79:fe:b3:0d:eb:ab:57:be:a2:e7:f9:3f:03:8b:
3e:08:8a:e6:ae:05:f0:d5:59:c1:48:fb:8e:7c:0f:59:11:95:
05:22:dd:5a:a6:f0:fa:0e:3c:a6:79:d9:2d:11:08:f3:48:e3:
2e:ed:98:0a:e6:1f:73:94:9d:6b:b3:52:77:70:0f:df:e4:71:
ec:58:e5:25:ff:7b:be:6b:a4:54:35:15:a4:d4:dd:ad:c8:f6:
85:e3:6b:0e:14:6e:bb:20:3e:e7:64:12:34:b3:ee:56:fa:81:
f6:c5:60:db:64:9a:d7:c1:45:26:48:60:fc:67:20:64:3a:72:
21:b4:4a:d1:32:e8:67:cb:8f:99:eb:e9:bc:32:cd:98:47:e8:
b0:26:0d:3b:24:3d:59:15:b3:e3:e7:9f:a9:9a:33:ea:69:06:
b5:28:2d:90:88:ec:a3:d3:37:f3:2f:d3:52:18:e6:0f:5c:16:
62:59:04:bb:38:82:61:6d:e2:98:7d:1a:31:af:bc:27:9f:0a:
17:25:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:17 2025 by rpki-client