Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8133cc7c-ca66-398e-a8cf-c98ec9a0f32a.roa
File: 8133cc7c-ca66-398e-a8cf-c98ec9a0f32a.roa (raw, json)
Hash identifier: fYA3UI8it7CtgYlmoKPhwMD6v/mLR0Ye/bz9lkdITts=
Subject key identifier: 03:24:43:C9:BF:6A:75:8B:E3:FA:45:5A:41:D1:67:E0:8A:AF:39:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C144AF8D958A62E57E64200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8133cc7c-ca66-398e-a8cf-c98ec9a0f32a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.231.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:4a:f8:d9:58:a6:2e:57:e6:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1328e0fa-0016-4e10-9e54-1487cacf6bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:a1:29:3e:ec:ff:38:56:c2:81:ce:fc:e6:62:
78:a8:e0:fd:ff:e3:60:fa:e2:eb:6a:fe:65:b4:a9:
dd:c9:84:6e:27:aa:03:99:82:70:ba:a8:dc:3b:ec:
f9:db:cb:d4:40:bf:80:b3:9e:ba:ea:d8:ca:94:0e:
60:78:60:af:9d:5c:3a:70:96:87:2f:3d:bd:34:2a:
e7:51:94:53:40:b5:bb:16:da:4d:ae:d5:10:ea:b7:
19:5b:50:b2:53:14:40:86:d6:64:12:5a:1b:cf:6b:
86:73:9b:8d:13:cd:58:52:5f:4b:89:b1:49:69:db:
bf:12:4b:77:a1:0e:57:57:a8:18:de:d5:87:ad:f3:
8b:87:15:49:b0:19:45:63:a8:0d:72:52:74:83:9b:
64:97:c5:0b:11:60:16:57:d0:7a:26:cc:ff:76:df:
13:b1:f7:ad:6f:ce:4c:13:1d:cf:a4:29:c8:3c:70:
41:8f:f9:a3:d1:87:40:5a:a3:a0:cb:4c:24:32:40:
55:ff:b0:a2:e1:45:dd:e6:24:cc:76:22:b0:21:00:
0d:c1:1f:27:20:7e:28:01:df:76:d2:49:f8:1e:2b:
34:6b:16:f0:86:bd:a7:a7:c4:d3:b8:38:a7:c3:68:
f1:e2:f6:f0:ef:5c:e0:36:13:ce:b3:12:6c:d1:73:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:24:43:C9:BF:6A:75:8B:E3:FA:45:5A:41:D1:67:E0:8A:AF:39:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8133cc7c-ca66-398e-a8cf-c98ec9a0f32a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.231.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:b9:5a:76:59:16:28:e2:55:a1:aa:9f:3f:8d:35:20:89:8d:
78:29:82:ac:56:a4:44:8e:2e:14:15:9b:f3:d4:92:f1:c6:4d:
d2:de:ae:d2:b5:c5:22:a3:88:05:ee:ec:62:10:ce:32:b0:19:
cb:f1:f4:d6:29:2b:4a:ca:e5:7c:99:a7:db:3c:25:01:c4:04:
0f:c6:c4:0c:4b:9e:91:f4:50:ff:3c:07:a3:7e:32:6c:4d:aa:
c3:8c:06:45:db:72:2c:2d:f9:7d:a7:93:d8:7f:e5:a2:f4:80:
7d:8a:95:40:89:24:e1:4b:ed:89:74:73:fe:b2:6a:39:4b:a5:
f0:e2:f9:45:49:2e:7a:cf:24:09:8d:2b:00:33:37:0d:a6:22:
b3:8b:f1:4b:cc:47:9d:8d:9e:f9:b5:8b:93:a9:64:df:6d:4a:
b2:87:4a:9f:2f:3f:4c:cf:70:96:4a:56:c9:16:e1:02:35:79:
84:d3:e4:b8:a5:ca:d7:6d:8f:17:8e:bd:3b:ea:1c:32:84:80:
fc:45:4c:c3:4a:14:46:46:7e:68:2d:9a:97:ba:17:e9:ce:25:
c7:3e:72:fd:b1:5b:37:42:d2:e7:52:9d:63:d7:bc:a1:f4:cb:
3d:d3:23:2d:65:d0:89:4a:be:0f:a4:bf:e3:04:21:5b:ed:85:
39:17:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:03 2025 by rpki-client