Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd22aab-ac02-3afb-8bbe-3df1502ca832.roa
File: 8dd22aab-ac02-3afb-8bbe-3df1502ca832.roa (raw, json)
Hash identifier: WyNopAz9XLyPSFIQ6PWSFVFj+gPGBMtt37IQjzLrBL0=
Subject key identifier: 71:84:C6:DA:35:E6:37:79:0E:46:65:26:B8:C1:55:A5:1E:B8:48:4A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B262E130A81093D63DAD9500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd22aab-ac02-3afb-8bbe-3df1502ca832.roa
Signing time: Tue 28 Jan 2025 17:40:00 +0000
ROA not before: Tue 28 Jan 2025 17:40:00 +0000
ROA not after: Mon 28 Apr 2025 16:40:00 +0000
asID: 33491
IP address blocks: 73.22.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:62:e1:30:a8:10:93:d6:3d:ad:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:40:00 2025 GMT
Not After : Apr 28 16:40:00 2025 GMT
Subject: CN=b311188d-5144-4133-98bc-643b4460bb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:49:95:2a:a7:c3:47:d8:bb:4e:ad:7d:58:
e3:43:ea:9a:a4:5a:a3:56:39:8c:ce:f5:44:48:d4:
8f:8c:86:ce:dd:71:ac:22:5c:37:c2:4a:96:30:1c:
53:45:9e:93:f8:8c:2d:c2:fc:68:ef:76:dc:82:3f:
73:e4:b8:54:04:7f:36:89:cb:fb:99:f1:9e:06:c6:
e7:19:7a:9c:c1:cd:ed:52:a6:8f:da:9e:87:09:78:
f5:14:61:80:e9:cf:03:ea:2b:da:b9:e1:f9:21:e2:
6f:ca:a4:ef:23:37:4c:1b:54:59:a5:09:d4:ed:16:
25:13:0b:ad:3f:37:28:72:33:89:61:34:08:45:11:
95:b1:de:d7:be:ee:43:a9:57:42:e6:bc:3f:d2:40:
68:3a:61:51:14:46:ff:17:df:9d:80:a1:44:d6:ce:
85:60:01:f2:b8:a0:49:a2:e1:05:2f:67:43:fa:77:
72:d1:ad:c6:74:03:17:b3:8f:d8:58:f0:84:7f:10:
a9:d4:d2:92:61:1a:05:72:36:69:ed:d7:79:bf:47:
fe:7c:41:3b:b8:39:98:d7:f3:0d:d0:02:f0:d0:43:
2f:4e:97:5a:52:0f:68:da:35:92:f9:62:f5:61:6a:
94:f0:6b:d6:b7:78:75:36:c6:20:26:c9:31:bc:3d:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:C6:DA:35:E6:37:79:0E:46:65:26:B8:C1:55:A5:1E:B8:48:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd22aab-ac02-3afb-8bbe-3df1502ca832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d0:0a:eb:87:b4:09:a6:66:f4:9a:eb:f9:c0:78:12:57:5a:
0c:b1:8f:03:27:ca:6d:99:c0:09:d8:8b:f4:62:3e:1a:d4:32:
99:62:80:db:ea:24:55:60:6c:07:ff:4b:8d:10:2d:cc:68:3f:
9c:e2:1c:0c:46:7b:52:2b:87:92:98:4a:4b:7e:b5:99:04:c9:
80:d9:01:43:63:db:5c:c6:b4:98:46:c9:ed:b9:12:ae:a5:78:
08:27:bd:13:ec:5d:d9:fb:67:e0:13:2a:4f:28:22:18:78:9b:
7f:ea:b0:25:89:60:d4:7d:e5:bc:3a:75:9f:9e:d0:bc:38:17:
b0:45:af:d7:44:4e:9a:b9:ed:7c:5b:45:5c:7d:04:0e:54:91:
41:da:18:c8:8a:6f:b6:e5:45:13:6f:68:78:a5:32:28:0d:ae:
24:08:53:73:c9:f9:75:07:9e:9b:c4:c3:91:d7:f0:97:c3:46:
65:d0:d2:a7:5c:40:ab:9a:c6:17:c8:d1:6c:c7:89:ee:b4:85:
34:43:ee:37:0f:f3:e1:e8:15:d3:29:49:5b:b1:2a:d4:47:d9:
12:69:46:10:b4:b1:66:98:0d:86:ac:72:6f:d8:63:d6:ff:c3:
97:4d:c2:63:17:df:40:a0:7d:0f:ee:71:f2:b4:06:8c:62:4a:
94:a5:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:12 2025 by rpki-client