Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa
File: 5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa (raw, json)
Hash identifier: fydTtuo9jkdUd2Uj/Wkg4oXiELEV2sDhWLQB3rDuxXM=
Subject key identifier: BD:E1:E5:0B:F1:A3:F1:F2:A1:00:88:54:E2:9F:DC:25:E6:B6:3C:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814400642F7456C8C68C9E900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.55.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:06:42:f7:45:6c:8c:68:c9:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=20afbb89-be1c-4573-b016-32ca77292b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:fe:17:9d:f6:a6:af:85:9a:0e:a2:23:50:
9d:78:26:b5:f1:e4:3c:69:cf:c9:3f:bc:61:31:6a:
1b:32:24:3b:b9:8d:05:08:2f:f2:4a:2d:f2:95:7b:
a2:74:fe:fa:fb:f3:9e:f1:02:98:62:f3:57:13:01:
8a:cf:6a:90:f0:af:26:24:a5:2d:a0:64:1f:7d:d5:
85:9a:5f:8e:25:63:40:25:2f:c6:55:a9:fc:91:34:
80:10:9e:9d:c1:78:7a:fa:1e:91:3e:05:81:e2:6e:
80:1e:05:d8:b0:a5:bb:58:e2:bd:70:73:43:6e:0b:
20:0c:bb:02:17:f6:27:9a:dd:85:7b:5f:f4:ed:49:
1a:02:eb:ba:6a:c7:26:e7:1a:18:08:99:2b:77:1c:
48:62:6f:1f:b7:e0:0a:61:72:2c:bf:26:7f:7a:8e:
e8:f5:5b:6a:92:93:62:1c:81:e4:a7:e6:87:3d:9e:
f4:96:a3:0d:0f:cd:d5:c3:31:00:fc:d6:5d:67:c6:
35:65:14:61:70:04:b8:e9:06:ac:1f:ad:d1:d5:28:
6a:75:26:fe:1c:16:11:5d:4f:04:9b:ba:98:46:1f:
1d:50:50:ce:8d:77:e8:72:f5:4a:e7:7d:80:37:17:
aa:c0:71:48:88:5d:29:f5:59:bc:dd:4d:1d:bd:bc:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E1:E5:0B:F1:A3:F1:F2:A1:00:88:54:E2:9F:DC:25:E6:B6:3C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c210ea9-fac6-3ad9-9390-fb6adf5f73d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.55.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ba:b8:8e:d0:5b:fb:aa:ff:5f:75:7e:ba:28:e4:85:9c:94:
7a:e0:bc:9a:38:be:ea:31:8a:3b:f6:94:2b:d7:5e:f5:8e:49:
f1:f8:2c:82:94:70:9b:c3:9a:57:27:f3:a3:d0:48:c6:0a:ef:
44:d1:b5:3a:db:0d:75:0d:a7:b8:49:60:12:a9:8c:f8:d3:d5:
ed:8b:52:11:73:57:18:db:35:4e:e3:57:ad:63:c2:b6:1d:f6:
60:57:90:fe:ae:20:79:24:e1:2a:37:94:12:95:ab:cb:ba:84:
92:4f:a2:d3:2b:cd:4d:1f:df:a9:37:87:ac:a9:30:23:d5:bf:
0f:40:96:1b:22:6e:8d:b6:44:d2:0b:4e:e2:34:11:f7:25:d5:
21:bd:4a:a2:63:ec:e3:77:f5:ed:41:02:7e:df:93:69:31:5c:
0d:44:47:c6:7f:cb:f2:82:b2:66:4b:1c:9c:0c:bc:83:44:b5:
33:6b:90:a5:3b:25:27:bf:10:72:4c:fe:ce:bf:db:78:31:18:
e2:e3:f3:a6:c2:a1:7b:d7:4a:a8:54:15:b6:c1:6f:a4:d8:38:
9e:d1:22:15:f3:24:92:18:9f:c4:14:a6:c2:95:5a:9c:18:07:
53:e5:8f:81:6c:ad:65:da:6f:b0:91:91:7b:fa:0b:6b:6a:37:
46:07:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:11 2025 by rpki-client