Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c5af027-d3d2-31c8-afc6-2d0742f3c8da.roa
File: 8c5af027-d3d2-31c8-afc6-2d0742f3c8da.roa (raw, json)
Hash identifier: f0LTNRyJYtpigEf31vg6coaKWYqhF4lSyRX3UQ+0wz8=
Subject key identifier: EF:28:CC:03:49:5A:2D:09:5C:1C:1A:55:96:6C:17:32:F4:4F:08:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12EC25D71871D13398D550
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c5af027-d3d2-31c8-afc6-2d0742f3c8da.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.8.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ec:25:d7:18:71:d1:33:98:d5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=19a16bf8-a91b-4dba-877e-e1e8f0d4ad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:82:74:20:00:7d:28:7c:4f:24:2c:88:7d:
1d:2a:0b:5c:83:58:fa:92:f4:f0:8b:2d:fe:c9:94:
d0:4e:ec:f0:d1:e6:ad:25:87:dc:f1:b5:7e:d3:02:
16:6c:e8:18:1f:a5:8e:57:78:3a:df:bb:10:0a:0a:
8b:59:0b:d5:98:43:c6:cd:56:1b:5b:25:be:55:ee:
67:06:a3:d5:26:b5:ef:d1:8d:a9:9b:a4:cc:39:42:
3c:8f:34:05:f3:6f:5a:7c:81:c7:7b:01:86:b3:87:
9d:91:49:99:3f:c3:f4:bd:36:4b:7e:3b:e3:1e:2b:
34:34:25:ab:b2:38:9f:2d:e5:a3:37:26:58:6e:ed:
53:6a:af:6f:68:60:80:b7:a1:49:0c:79:b1:80:7a:
0b:17:dd:06:b5:13:76:c1:a0:85:7b:a5:9e:e7:26:
1f:c8:c9:a6:14:1c:38:37:7a:b7:d6:3e:6d:c7:8f:
04:a8:ab:22:22:f2:c8:a8:ce:ea:96:6c:d5:d6:10:
e5:96:1d:58:bd:bd:05:4e:cb:33:e1:8a:6c:ab:07:
bf:e6:5b:2c:6e:0d:f5:48:de:9b:ee:9c:ab:2e:88:
47:e2:d4:d3:2b:04:09:93:40:7a:d3:f1:21:c1:3d:
96:92:59:ff:1d:b3:d6:ef:9c:67:fb:90:e1:07:a6:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:CC:03:49:5A:2D:09:5C:1C:1A:55:96:6C:17:32:F4:4F:08:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c5af027-d3d2-31c8-afc6-2d0742f3c8da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.8.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:d3:2d:81:10:e6:05:d8:04:ac:27:34:0b:11:4b:6b:de:46:
ed:75:9d:7f:5f:fb:77:4a:7c:6c:db:63:05:91:22:19:cd:fa:
88:30:c5:70:b4:f2:4e:c9:0e:7d:a4:85:02:dc:bf:84:00:14:
36:88:48:33:b2:4c:48:4d:45:29:ac:f3:e1:19:40:c7:63:b9:
a3:08:bf:d7:68:d2:04:f1:da:38:2d:6e:ce:93:4e:8c:20:bb:
fd:c0:fd:1b:28:3e:7a:67:e8:aa:25:8a:3b:2e:8c:1d:76:ba:
05:9e:f5:87:fa:1a:cc:5f:cc:12:a9:9e:1f:b9:2a:7c:a7:18:
bd:c7:63:1d:bc:63:42:b6:0c:6e:2a:5b:ee:a7:e4:b6:d0:de:
d1:cc:ed:3f:5c:1f:d9:e2:77:32:a2:f0:28:48:92:b4:48:4b:
14:92:1f:5a:2b:d8:e2:24:78:0a:be:41:3a:ea:11:8a:a0:e7:
b6:51:46:93:1c:a7:ae:99:d9:34:78:4c:e3:dd:97:83:af:46:
9f:6f:c0:5a:77:e8:38:1f:09:3b:9e:b6:21:c7:4b:e9:a7:18:
37:9c:34:70:43:51:33:2e:27:7c:06:91:a2:04:be:43:99:f5:
1d:af:65:33:3c:34:de:0c:4d:23:4b:df:82:6a:84:d4:64:d5:
bc:21:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:02 2025 by rpki-client