Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa
File: 8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa (raw, json)
Hash identifier: PwhvEJqCLzjaOBL6MJAzQEwAgkkoj9yru4GKUVYPj9c=
Subject key identifier: BB:5C:2F:CD:C5:B3:A0:D3:1B:8E:E9:A0:D9:9B:AE:66:5B:E9:F4:B1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C125187C92FDDE2157A0CF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 73.188.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:51:87:c9:2f:dd:e2:15:7a:0c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d8ecd8b5-0d7a-436d-98d7-5db5ea391d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:60:44:1d:1f:6f:1a:5b:0e:fb:9c:10:d8:
a0:d2:b9:5b:3f:1b:7e:91:66:cd:46:d0:1e:fb:f9:
dc:f7:f6:8b:93:cf:f4:76:32:b2:a8:39:c8:59:09:
2c:00:ec:b5:b6:ad:82:34:b2:67:f8:87:6e:b2:1a:
81:46:04:b6:97:1f:93:c5:77:01:08:6e:e2:7b:7d:
a7:14:44:88:ee:d1:00:6e:6b:2b:a9:4b:f7:d9:84:
94:24:78:56:16:01:7b:46:fc:34:b7:05:5a:d1:6f:
a9:ad:63:d8:d9:37:87:a2:96:05:b2:b4:bb:46:68:
f0:e9:b9:08:5d:6e:13:84:26:e0:17:03:87:73:85:
95:28:41:2c:45:40:1f:90:40:ce:fd:ba:20:c8:17:
38:86:4d:db:04:a2:8d:c3:34:b4:3d:65:97:1a:bc:
d0:82:fe:6b:5b:e1:cb:08:a5:eb:8e:d3:82:c2:69:
a5:c0:a5:63:fa:60:af:5a:9f:02:da:08:58:94:d9:
3c:55:87:16:23:a5:45:00:73:45:22:f5:2e:ed:97:
36:24:a0:55:08:68:94:5c:18:7a:d0:2f:17:3d:27:
c5:6e:73:ba:65:9c:da:34:23:6e:45:dd:9a:76:41:
86:15:4f:65:c9:a0:17:7b:f2:df:69:16:4b:90:44:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:2F:CD:C5:B3:A0:D3:1B:8E:E9:A0:D9:9B:AE:66:5B:E9:F4:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.188.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:99:d4:84:de:d3:04:25:1a:a1:25:7c:ad:1f:7e:8b:54:c8:
87:d6:a7:63:5b:53:9e:20:97:b7:f0:64:0d:26:1a:8b:3c:b1:
47:b5:72:e5:62:9c:45:95:81:35:a3:ea:3e:c8:6b:90:6a:b7:
2e:b1:bb:ee:38:e0:c6:60:8a:42:97:1c:99:d2:96:76:bc:11:
b6:3a:b2:57:cc:73:82:7d:0b:c0:57:a8:a5:e2:9a:7e:ec:6b:
52:c7:1b:3c:4c:f7:92:cb:3d:bd:ad:73:0c:93:00:d3:20:f7:
e7:fd:24:56:be:02:d0:ee:56:13:c3:97:b2:32:c3:8e:96:7c:
26:b0:6b:de:a1:a1:6f:70:17:5b:0f:2a:1e:88:49:c4:e3:b2:
f1:b0:21:1a:04:33:0b:5b:11:f8:c3:81:17:2b:50:e7:90:7e:
fa:06:4d:49:a9:cf:16:1d:55:14:80:d9:5f:53:dd:0e:9e:06:
8b:d7:9a:00:0f:d2:d3:6d:21:3c:e5:47:9a:66:03:bc:2b:a1:
0c:4c:3b:39:e8:7a:52:0b:36:5d:18:17:fd:e9:01:52:ce:10:
28:59:a9:ed:79:fb:59:7f:61:dc:a4:17:17:7d:a9:d8:c5:2c:
b9:0a:a4:f9:dc:79:23:c4:ca:8a:87:b1:02:b1:b8:af:5b:0b:
c1:19:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:35 2025 by rpki-client