Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e0bf5b0-4061-36dd-8691-1b5d79ddd279.roa
File: 5e0bf5b0-4061-36dd-8691-1b5d79ddd279.roa (raw, json)
Hash identifier: 4gIRhDDv1pQ+J0KfgFAv7vRffmIdKK+g8tEJR7D6oWE=
Subject key identifier: 8B:7F:0E:4C:E8:39:A8:6A:90:AA:CD:36:98:AD:E2:DF:D3:56:B0:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BAECA90607514372FF580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e0bf5b0-4061-36dd-8691-1b5d79ddd279.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.232.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:ae:ca:90:60:75:14:37:2f:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c4330446-7306-44a0-9414-0a8d0536e9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:dc:21:d6:a2:f4:de:1c:46:13:06:cc:8e:
b1:d0:4c:da:49:15:0d:98:f9:07:68:34:0c:c1:fd:
22:6c:1c:00:9c:cc:2e:14:94:f2:9e:ff:a0:ec:06:
cc:27:33:28:68:9b:77:df:47:86:78:29:fb:d0:d4:
a7:e2:79:78:a2:44:ba:c3:12:2a:f4:b1:d1:a9:2a:
2b:37:c0:e1:dd:ce:7d:e7:5e:54:33:e3:c1:e7:df:
dd:f8:50:44:0a:15:59:3f:d3:80:be:cd:83:1d:13:
9d:37:fa:5d:81:93:ae:79:0a:82:c9:25:8b:fe:9f:
53:81:14:6b:e7:b4:1d:24:e4:92:21:46:e7:b6:0c:
01:72:4c:52:89:e1:54:ad:34:f6:d2:8f:cb:4b:9c:
c2:df:33:6f:32:4e:09:08:5f:2d:fd:f8:54:00:15:
54:61:bd:8d:ca:94:47:8a:b8:be:e5:5c:90:79:c1:
2c:4c:3a:90:3f:bb:36:58:b4:14:30:c9:97:e2:5a:
53:d2:95:48:3e:5e:35:dd:d6:92:fe:3e:b7:a2:e4:
b8:e7:38:27:0c:bd:0f:eb:fe:f4:09:93:23:e1:75:
d8:a4:7b:2f:f7:ce:6b:9b:7f:f8:53:7a:1f:51:c6:
45:75:ba:d1:5b:65:c4:d1:2b:45:29:63:58:05:87:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:0E:4C:E8:39:A8:6A:90:AA:CD:36:98:AD:E2:DF:D3:56:B0:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e0bf5b0-4061-36dd-8691-1b5d79ddd279.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.232.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:98:a7:fc:67:6e:34:28:25:db:96:66:26:9e:ae:df:44:a4:
97:f9:21:a3:c8:bd:6d:09:9a:ff:d5:55:24:a2:1d:11:de:de:
4a:02:f3:ce:ca:e1:b6:c5:98:4d:d4:19:46:ac:83:59:92:bc:
eb:80:a4:27:f2:60:6e:7c:44:2d:ba:83:2c:23:f6:b9:df:fb:
32:22:3a:75:eb:4b:da:8f:76:ff:ba:9e:70:61:8b:a7:c9:05:
93:16:9c:6f:68:8e:0d:3d:2c:d6:1b:51:4b:4f:a9:84:fe:4f:
bc:2d:5f:17:10:30:46:c9:da:07:45:d4:57:b0:d0:33:0c:eb:
ae:d5:45:b5:88:d4:51:5d:c6:71:69:8e:85:ac:63:63:1b:55:
e4:bb:dd:43:8f:83:0e:d2:d3:37:89:7a:08:34:32:94:bf:7f:
68:6b:9d:13:b0:91:0e:ce:75:e0:35:4e:dc:f5:a2:24:bf:d5:
4a:a1:aa:51:5e:98:12:3b:d4:5d:89:79:a2:68:4c:a4:80:73:
60:77:5e:9f:7f:13:9a:ce:41:60:25:e3:55:df:a4:13:a3:65:
0e:6f:d3:b9:9b:95:45:9a:71:48:dd:7d:88:57:1a:eb:2b:2f:
30:c4:14:8b:e8:22:bb:1b:42:4c:14:58:df:22:e7:d9:72:63:
dd:06:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:43 2025 by rpki-client