Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825d93d9-898d-341a-b685-a479b298cc4e.roa
File: 825d93d9-898d-341a-b685-a479b298cc4e.roa (raw, json)
Hash identifier: g18q5JMFZJW0xg7T71LaqlvQ2ubCNPLfGvBym0bQUfs=
Subject key identifier: 02:CD:A1:19:D1:52:72:07:E3:22:53:09:7F:98:5C:E7:67:B1:59:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13DEB9251285948792B1A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825d93d9-898d-341a-b685-a479b298cc4e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.170.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:de:b9:25:12:85:94:87:92:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2636c10b-86bf-4d00-8d3c-298e7a1a32bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:ef:35:3e:43:a4:a3:fb:4d:6e:f3:4b:9e:
1f:a7:a4:ec:14:70:20:20:16:c5:05:85:54:71:4d:
50:c3:01:47:63:2a:a7:8c:ac:06:56:81:23:7c:52:
a3:f2:61:d3:ee:7b:fd:61:6a:29:29:e7:d2:dd:ee:
0c:fe:a8:4b:b9:79:cc:be:1f:ee:2c:88:6a:82:cc:
6c:ce:e5:1f:f9:b0:0a:71:d6:9e:61:4a:aa:c3:a4:
8b:4b:54:9f:eb:c3:4a:57:ac:70:22:28:32:a5:07:
12:c3:af:a3:f6:e9:8b:2a:d6:7f:8a:59:ce:b0:95:
bb:27:70:24:69:85:e4:73:da:77:1b:13:e0:34:a5:
a9:40:11:27:f1:9d:c9:67:4f:cd:62:f3:fa:6d:56:
35:37:1c:5f:f4:63:21:af:11:5f:88:ee:7a:e8:c1:
b4:a8:74:b3:47:b0:d0:a8:46:bd:ad:ce:4e:5c:57:
a1:d8:1d:90:0c:20:28:5c:64:48:38:d7:83:46:4e:
00:f9:f8:0e:da:6d:66:a0:99:ec:2c:3d:37:df:eb:
34:d8:fd:73:72:2b:b0:e1:95:a2:b6:90:24:83:ef:
7b:55:62:10:f6:3b:6c:05:c6:89:ac:17:f0:9a:fd:
b3:a2:4b:ca:45:1e:68:69:3b:6e:cf:17:87:ee:1f:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CD:A1:19:D1:52:72:07:E3:22:53:09:7F:98:5C:E7:67:B1:59:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825d93d9-898d-341a-b685-a479b298cc4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:eb:0a:ed:58:32:02:e6:7d:7f:e3:db:a4:69:c3:d7:b8:fd:
3d:cc:4e:69:da:18:0d:93:54:5d:68:81:5c:2b:24:05:89:1b:
1b:53:38:15:57:44:a6:20:51:71:13:62:82:59:4c:77:dc:ec:
00:a7:33:b9:73:a9:1a:5b:a4:31:48:a1:66:36:89:ec:a1:ba:
9e:e4:9c:55:60:92:9f:99:4a:39:3f:aa:23:f9:b9:6d:d5:0e:
1d:e1:ad:d2:c4:dd:52:b5:42:19:8c:b2:f3:96:8f:1f:21:06:
9f:34:0b:5d:22:48:4a:2e:06:2d:8a:18:73:1a:3f:b8:ca:17:
25:5d:82:bb:38:5c:51:92:24:ac:e0:71:87:7d:86:81:92:c9:
48:9b:34:a6:b3:83:1a:06:c9:60:8c:73:bf:56:74:2c:3b:16:
11:ce:6a:03:f8:c5:f4:ec:6d:30:85:1d:cd:bf:90:8a:c6:61:
9b:7d:a5:98:f2:e8:32:5c:f3:29:3f:6a:e5:02:4d:60:bd:b5:
db:66:fc:4c:74:b3:d8:13:f9:f0:97:59:55:e6:5a:df:ae:15:
4a:4a:1c:1e:96:24:aa:70:43:59:d5:7d:be:98:1c:e7:8f:25:
75:40:e4:fd:49:6e:13:80:9e:fe:88:d8:18:6d:7f:3d:eb:91:
ed:bf:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:36 2025 by rpki-client