Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c41b71b-2470-34c1-8d8b-17798c1d1333.roa
File: 8c41b71b-2470-34c1-8d8b-17798c1d1333.roa (raw, json)
Hash identifier: V2uMIVqMUpOTxVv+ZTHw7+LixsQsLCI1e4o33O+4d6Q=
Subject key identifier: E9:82:73:06:A8:35:99:79:88:A8:1C:CE:07:26:F4:56:A4:F5:9E:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12B1AD5DE6B4534005CDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c41b71b-2470-34c1-8d8b-17798c1d1333.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.22.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:b1:ad:5d:e6:b4:53:40:05:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1a31ec16-f4fd-4cee-8563-72ccedfd3cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:56:eb:69:c4:58:93:26:03:27:55:f1:14:
5f:02:bc:5f:21:ff:10:c5:94:bb:fb:a8:ee:a4:9a:
e3:17:a7:18:15:9f:ad:9a:b5:59:71:02:9e:9d:37:
d1:a8:93:d0:31:db:0b:b7:11:7d:9f:bd:d5:dd:d5:
f4:2f:9f:e7:74:00:5f:b8:8e:77:70:87:81:dc:b2:
6e:7c:c9:e3:14:00:94:fd:d8:cf:11:95:e7:b2:67:
1e:41:7a:9e:1e:72:6b:77:04:d5:63:67:f9:f8:bb:
44:4e:7b:2a:5d:89:04:31:63:cd:d7:66:df:9c:19:
db:b6:a5:40:cf:33:87:f0:f9:c9:ef:87:ab:cc:cf:
c6:11:9d:2d:8d:4a:6f:36:a4:f1:2a:d7:e1:2f:cf:
b2:89:e4:cf:d3:47:bd:9c:71:9f:04:57:59:71:10:
78:03:38:6c:8a:f9:13:a7:f1:15:38:ad:ff:fd:32:
a0:33:59:c4:79:30:3d:3f:02:48:0d:9e:9f:9f:73:
77:b0:49:09:95:8b:d8:cc:e4:a6:22:30:12:f8:52:
a5:bb:0b:f0:d6:05:44:20:83:fc:ed:1a:d0:1b:53:
c9:8b:74:5b:bf:a3:0e:35:a0:3e:29:4f:a9:68:69:
75:4e:34:7b:2f:6d:d0:b2:69:12:42:a9:7c:f9:44:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:73:06:A8:35:99:79:88:A8:1C:CE:07:26:F4:56:A4:F5:9E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c41b71b-2470-34c1-8d8b-17798c1d1333.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:02:11:21:94:10:d1:b3:2f:9a:ba:4c:a7:99:1a:1b:89:35:
19:b4:ff:6e:ee:71:7a:d8:a5:4b:52:ce:37:ad:85:33:05:37:
95:3f:88:ea:d7:f1:d4:70:7d:df:3c:f1:7c:7a:96:28:27:61:
08:fc:69:3d:ba:de:7e:2f:25:f9:8f:60:83:e5:97:f2:5e:72:
d9:8e:b1:11:8e:94:d8:d0:58:ad:d2:dc:4f:30:0c:c3:51:18:
02:94:1b:e2:24:39:66:5d:39:09:af:fd:74:06:67:a1:44:a0:
28:2b:28:a2:8d:12:46:aa:13:6f:42:0f:80:46:f3:42:2d:50:
6e:85:a4:4c:ed:27:4f:c0:2c:69:ae:b8:40:f0:ad:cf:87:bb:
20:01:ae:88:e3:38:93:cc:61:41:fa:dc:8c:6b:f4:ca:df:d3:
a5:a6:0c:89:40:8f:a6:54:55:46:ca:ce:fb:1f:1a:5b:b1:5d:
c8:df:0d:61:e3:4b:74:00:dc:59:f3:04:9a:9c:1b:81:ba:82:
ba:f0:f4:cf:6f:c8:41:d5:60:14:3b:50:8a:db:86:83:55:4d:
c4:6e:1c:35:2d:7e:9a:59:61:ae:ba:f2:11:8f:01:bc:85:84:
09:c8:b4:bc:ab:55:f5:23:71:fa:fa:d2:98:01:75:82:74:69:
ce:27:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:49:30 2025 by rpki-client