Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa
File: 5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa (raw, json)
Hash identifier: SCEFmcwpanBKS3ueuuFtzaUrjcUGCpkWQcVOtkXVwcs=
Subject key identifier: 2D:50:A7:6E:D6:D0:94:05:1C:27:B9:DD:15:8A:3F:34:84:2A:50:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13C0AD47FB8520B7B66360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.158.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:c0:ad:47:fb:85:20:b7:b6:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a0f74d35-36f3-4c86-b2d4-4546f25faf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:0c:ff:ce:82:4a:f3:89:07:23:3a:e3:c0:
4f:76:20:60:4d:ca:71:4e:10:0e:ac:d5:cd:d6:3c:
c8:15:f1:d1:ca:8e:6f:b0:9d:3c:46:c5:21:0f:48:
aa:64:f0:f9:29:18:95:09:c1:ee:39:2b:f0:28:cd:
c1:d3:e6:e1:17:2d:99:82:89:fc:77:f6:2d:a7:c7:
7b:2e:7d:da:e5:e5:9a:91:f7:5f:a9:68:84:9f:3e:
99:69:d5:55:bf:e8:2c:f1:48:61:68:01:1c:2b:9c:
70:74:1f:d8:2f:96:ba:bb:2f:17:13:93:bc:c7:61:
bd:09:ab:61:48:0a:c5:7b:ce:51:ea:3e:67:93:a0:
e6:77:0e:04:68:f3:12:2d:72:34:26:b8:bb:bf:17:
e3:08:ee:f0:72:28:55:f2:99:ec:93:58:13:87:2e:
20:d7:af:ed:64:60:2d:27:ef:5a:24:3e:e5:98:88:
5f:b6:59:0e:92:0c:9e:fb:07:a3:a6:ab:cb:7b:8e:
40:26:28:6b:fb:21:66:19:00:b6:f6:37:a0:7e:3b:
42:3c:c0:65:f1:de:44:87:96:e6:11:c3:f1:79:39:
82:17:23:26:7c:55:e3:58:8b:f4:5b:73:ec:87:95:
82:ff:39:15:da:29:0a:43:34:40:07:74:97:4d:06:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:A7:6E:D6:D0:94:05:1C:27:B9:DD:15:8A:3F:34:84:2A:50:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:a5:eb:03:a2:d1:18:ce:c0:2e:60:73:f4:fe:76:74:75:7c:
19:bc:b0:8e:3f:12:f2:37:47:8c:e0:f1:dc:46:c1:b0:88:87:
1d:42:e1:ab:d7:66:12:23:14:77:d3:a2:ac:cb:fb:de:62:1b:
20:27:5d:5c:8b:4a:1e:4e:f3:a5:e1:e4:4a:02:59:07:1e:05:
93:54:18:26:75:23:85:fa:c9:dd:a1:cd:8f:dd:41:c0:94:5a:
de:bc:23:ff:6f:28:9b:37:12:a4:f7:7b:8b:bb:6e:cc:ff:54:
f4:e3:6b:52:23:2e:84:f9:a8:fa:5e:65:3d:9e:15:81:b8:b4:
81:7c:93:ae:83:74:4a:73:7a:5d:ac:e1:83:1a:70:5b:b1:76:
3a:92:32:95:19:87:88:fd:85:43:15:a2:fd:3f:89:1a:38:55:
ff:30:12:70:64:99:95:cc:7f:85:d0:80:9c:5f:8c:fd:82:d2:
a5:44:cd:91:f7:65:51:30:82:b3:96:dd:ee:37:d8:96:91:3d:
a9:2d:24:7e:a5:fe:0c:ba:25:64:ea:2d:f6:9f:62:1b:5b:f1:
94:b1:9c:bb:2f:18:b1:b9:4d:0e:4c:3c:0b:60:40:a8:89:46:
50:2f:1f:25:f2:ee:96:87:a1:b3:b9:cc:fd:2d:60:1d:8f:f7:
6d:da:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:13 2025 by rpki-client