Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8eb9dcab-57a8-316a-aa9c-c5cf6618f5e7.roa
File: 8eb9dcab-57a8-316a-aa9c-c5cf6618f5e7.roa (raw, json)
Hash identifier: 2kJateJaZePUNKQOpXHGuVBcDONauueSa0TwuKDNj1E=
Subject key identifier: DE:02:49:C0:61:AD:1A:4B:09:53:AA:D1:68:75:6D:F2:09:96:6F:A5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C112A2846EC8F6D28B24680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8eb9dcab-57a8-316a-aa9c-c5cf6618f5e7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.74.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:2a:28:46:ec:8f:6d:28:b2:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=875979cb-df05-4d81-a830-c29d741a38d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:30:b8:cd:14:fb:fe:30:f8:17:d9:a4:e4:
a5:ad:86:e3:29:e1:c2:b3:74:99:73:7c:7a:08:a3:
d9:bf:19:a1:7e:51:44:3f:90:9d:79:07:a3:49:01:
cc:01:98:9a:bd:3b:c2:e5:dc:89:0d:db:a9:c1:ba:
fc:d4:f4:27:b5:d8:fa:47:f8:89:38:d4:65:92:c0:
ad:cb:6b:81:5a:6b:06:a4:c9:a5:51:9c:af:f9:99:
ef:b4:0c:a2:b5:66:33:f7:da:70:f5:88:92:08:69:
b1:60:78:1f:32:fd:50:7f:25:f7:97:ef:4b:6d:7d:
60:23:55:2c:ff:c6:7b:95:5e:08:a8:6d:d0:45:87:
95:98:fe:36:97:e9:64:5e:3c:d5:49:c6:cd:4e:f0:
42:05:2f:b2:3a:5e:63:02:29:14:26:de:68:65:47:
1d:c3:76:13:ae:2d:b5:e5:37:df:62:76:71:a0:05:
99:b0:1b:23:a9:8e:58:a2:f6:4a:22:ef:d6:54:db:
03:4a:f8:a2:dd:b3:23:2c:89:c6:23:34:e8:a6:20:
62:55:16:57:86:bc:de:19:fc:4f:52:96:63:3f:4d:
38:a0:4d:6e:c4:34:73:b1:ff:6f:fd:f8:3d:37:a9:
0d:9c:97:ca:8e:5c:b7:de:d0:de:43:95:4c:48:fe:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:02:49:C0:61:AD:1A:4B:09:53:AA:D1:68:75:6D:F2:09:96:6F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8eb9dcab-57a8-316a-aa9c-c5cf6618f5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.74.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:1d:d8:2a:38:71:ce:65:25:6b:77:6c:d2:2f:31:06:be:c2:
71:61:d0:01:52:d8:8c:26:c2:41:e0:0a:78:6c:7a:05:e5:9a:
84:f2:2a:6e:f7:93:19:7d:39:d0:c8:af:c3:7e:c6:50:79:16:
c4:72:11:7c:0f:59:9f:58:21:19:9a:de:28:ba:75:c3:71:6e:
22:ef:7f:05:ad:78:83:1f:ec:de:f2:1c:56:60:a8:a0:41:85:
91:a9:64:e5:52:d7:d7:cd:72:5e:fe:01:5b:81:66:df:2a:69:
28:f0:84:26:94:f3:df:d1:51:29:e3:3e:a5:4e:89:81:9f:bd:
f5:00:e5:2c:22:c7:81:76:4f:b7:77:0a:58:83:40:6b:f7:08:
10:af:6d:66:fa:81:0b:69:5e:5f:f5:f6:c4:08:2e:90:d5:9f:
3d:5b:f1:e2:d1:f4:a1:ce:e0:ae:f2:5c:be:e8:84:d2:40:af:
05:e6:dc:68:85:c6:93:42:38:88:96:b1:f0:a1:20:9d:e3:d2:
c3:a8:23:ca:b2:9f:5b:7a:f5:d2:40:a2:f6:7f:68:c2:c5:e7:
15:c5:41:9a:3b:8b:f9:de:a9:8d:6c:ac:06:13:c0:15:73:61:
d4:96:47:99:79:3a:fc:0a:bc:d1:33:a2:9d:16:1b:af:c8:eb:
46:23:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:37 2025 by rpki-client