Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5db3eb75-f83b-3ed6-9842-f2ae58bb3cfe.roa
File: 5db3eb75-f83b-3ed6-9842-f2ae58bb3cfe.roa (raw, json)
Hash identifier: Z2FuhMzW1XjxOKhfYpG5S3ZwyMwL9H+XnWevlO+mNRk=
Subject key identifier: 57:FF:34:B1:61:1D:AE:F3:14:5A:54:7D:14:D7:A7:44:BF:E2:55:60
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BA8B8EB1A9F45AE2D5800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5db3eb75-f83b-3ed6-9842-f2ae58bb3cfe.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.206.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:a8:b8:eb:1a:9f:45:ae:2d:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7b1293ca-5db0-4545-811e-568de87d0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:96:b8:81:fb:e1:1f:32:31:f8:c7:d5:a2:
ef:16:88:82:38:3e:56:63:14:ba:8e:63:1a:89:a4:
29:55:cc:95:64:c7:ad:b3:f6:15:ea:f6:bb:65:7c:
c5:32:c3:3e:c0:ae:10:b2:dd:c2:6f:83:73:bd:df:
be:87:8e:4d:7e:ce:0a:a2:3a:bd:90:18:ac:fd:d5:
59:a7:bc:e9:a5:40:aa:89:8c:4f:b1:a7:e8:02:c5:
79:25:06:4d:d4:ee:a0:a6:7e:e3:86:27:01:d2:6f:
f1:75:7f:dd:3d:c7:a6:c8:e3:42:f1:da:06:8e:2a:
e0:80:5b:25:6f:fa:7b:fd:16:02:de:84:0a:c7:ad:
54:71:4b:73:d6:fe:89:1b:87:74:00:b4:02:22:57:
d7:a5:52:d0:c0:0c:1d:4c:a9:42:a1:5d:5a:83:41:
c9:4e:94:b0:45:65:fa:51:b9:93:f8:b3:63:3c:12:
43:16:52:57:28:4d:3b:01:31:d0:a4:5e:80:1d:bf:
e9:2c:fe:be:81:c0:de:c4:02:71:6e:27:5a:4e:2d:
c1:42:d4:98:84:37:f0:9d:5d:12:b7:3d:ba:dd:f2:
45:76:be:db:10:e4:fa:bc:79:a4:d8:57:4a:3d:aa:
0d:4d:6e:76:02:bc:e7:06:d6:a5:18:34:77:ff:db:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FF:34:B1:61:1D:AE:F3:14:5A:54:7D:14:D7:A7:44:BF:E2:55:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5db3eb75-f83b-3ed6-9842-f2ae58bb3cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.206.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:dc:08:dc:d1:fd:92:ce:ef:d4:93:6d:4c:df:4f:20:f1:af:
e7:18:8b:73:69:7e:96:c0:50:36:c3:4f:32:fa:23:01:bc:f3:
72:b9:4d:64:fd:0d:af:6c:42:3c:b6:42:c7:ee:86:84:9a:fe:
22:7d:67:1a:b4:f7:d2:96:14:ab:f2:59:9a:ef:60:50:b6:d8:
4e:aa:65:fb:c6:13:1e:59:bc:22:95:a9:4b:4d:4f:4b:d8:b6:
09:b5:69:01:3c:d8:3a:fc:ec:52:70:a1:88:75:f4:d9:91:4c:
91:0e:c8:df:c0:2b:63:28:17:94:77:90:4d:90:19:2f:2d:94:
8d:2f:50:c5:27:12:5b:59:53:40:b6:66:d8:1b:ca:32:99:f7:
62:82:7d:f3:d1:0e:01:57:db:1b:12:c8:ca:3e:5c:a8:36:6e:
7f:01:c8:09:08:d5:ba:a8:38:ed:a7:ff:72:b7:a1:6c:3e:0a:
36:2f:af:05:43:07:e1:7f:7d:27:97:92:b9:02:b5:ca:8a:5b:
3a:b3:42:ae:c1:79:a6:bf:c3:ea:64:a6:7b:a4:82:de:af:3c:
d8:df:c3:76:30:c0:29:ad:a6:37:0f:72:a3:cf:a3:11:0c:2b:
e9:45:4f:4e:69:59:d2:d9:3d:de:8a:c0:90:91:ab:1b:29:11:
26:a5:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:08:35 2025 by rpki-client