Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f936544-dd97-3e00-a5ae-04510b0777d5.roa
File: 5f936544-dd97-3e00-a5ae-04510b0777d5.roa (raw, json)
Hash identifier: o8VB+PrGhsL+M/OGeSvMMsFfdzm3MzNoKJNadz3amko=
Subject key identifier: 8B:87:2B:6D:74:13:B1:34:BE:92:52:A0:7E:67:03:DB:13:3D:73:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12EDA498AD2F7C57EA6900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f936544-dd97-3e00-a5ae-04510b0777d5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.9.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ed:a4:98:ad:2f:7c:57:ea:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e3f14e4e-04c2-446b-a693-f8b26c015f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:02:03:bc:b9:2d:1a:26:d1:af:59:e6:b8:
93:f1:2e:90:9d:a2:56:2a:ac:fd:e0:a1:4a:f7:f0:
19:f9:69:a4:98:e0:61:03:de:9c:be:e9:2c:0f:f7:
d8:b9:5f:b5:86:fc:1c:53:88:9d:7d:ff:81:14:8a:
d9:f7:ca:34:c3:fd:dd:fb:ab:22:81:d5:f2:ac:db:
e2:17:a0:3f:e5:8e:1b:23:22:6a:35:3f:72:94:5c:
9f:7b:9d:49:ab:b1:ed:30:d6:c6:3f:4f:fa:26:3a:
da:72:49:1d:63:a9:1f:53:63:6f:7c:cf:28:d2:93:
96:64:ec:92:a4:c5:a5:49:71:79:cd:6d:cf:bb:a8:
f1:b4:84:6a:f4:63:8f:4f:48:87:d2:a4:a9:62:6a:
b9:72:23:02:55:f2:b2:31:1f:c1:a1:3c:06:45:b8:
b5:4c:2f:76:27:22:f1:32:f7:d0:7c:68:75:55:a0:
d7:3b:8f:96:8b:83:d3:49:d0:36:2e:52:15:0c:99:
aa:6f:1a:e2:7a:d7:c2:c6:74:23:18:d2:00:eb:6c:
d9:ee:bc:01:b3:52:b0:90:8e:06:ac:33:88:7c:06:
af:17:5f:4c:73:58:93:a4:f8:6e:68:4a:40:fe:09:
7e:e2:59:c6:87:aa:b5:e9:db:68:ce:d3:e6:ef:18:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:2B:6D:74:13:B1:34:BE:92:52:A0:7E:67:03:DB:13:3D:73:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f936544-dd97-3e00-a5ae-04510b0777d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.9.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:7d:27:5e:e5:01:5f:a5:60:1d:e8:32:6f:14:9e:ca:22:c5:
85:ce:d5:fd:85:81:3c:1f:5d:53:24:40:0e:65:c3:12:15:99:
77:36:76:fc:62:84:a2:84:9c:21:20:04:81:f9:db:d0:65:b1:
37:d5:e3:29:cb:75:d2:20:1c:e0:1e:d2:40:6d:09:24:e1:83:
33:d8:4c:59:5c:fb:63:89:2c:42:6d:d9:c4:2c:58:a8:91:6a:
51:23:1c:ed:e7:b4:02:ac:ac:a6:13:d5:96:d3:02:c4:ba:63:
16:39:45:d0:e6:21:0b:f6:66:cb:bc:eb:a2:e5:6f:cd:38:d8:
2b:92:b3:a6:dc:fc:a6:f8:c4:b8:94:d4:3f:9b:8e:1a:63:70:
27:60:bb:a1:ff:48:2c:6c:3c:14:44:7f:97:84:b9:57:99:4c:
3b:b2:7b:8c:1b:85:53:6a:77:68:0b:18:4e:68:68:05:04:4f:
3e:4d:60:8f:0a:f2:e8:e9:31:c6:ac:48:53:27:0b:c1:0d:db:
74:a8:09:25:34:bd:56:2c:bb:fe:df:05:f6:77:44:01:61:37:
db:3e:32:dd:6c:67:de:a3:c5:f6:9a:0d:b5:99:30:cd:ac:59:
36:4f:27:fc:d5:2c:40:06:e5:1b:b8:6e:9e:9b:38:62:99:78:
1f:5c:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:39 2025 by rpki-client