Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b4b9203-c181-3a01-bc3e-e0d02dc25458.roa
File: 9b4b9203-c181-3a01-bc3e-e0d02dc25458.roa (raw, json)
Hash identifier: 5HS+7Nis8E8byX4vk8QWEDnesTFzIcJXPGQC2Rvf6XA=
Subject key identifier: E3:7D:C3:A0:B2:DA:08:FA:BC:E4:8C:23:79:8D:7F:7D:AB:46:E8:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BC9CC813CEA11E96CBFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b4b9203-c181-3a01-bc3e-e0d02dc25458.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.32.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:c9:cc:81:3c:ea:11:e9:6c:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=47a77807-a5b6-4853-8974-7ea29d23abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:97:ee:c2:52:08:1e:d6:31:62:8c:d0:39:
fa:1c:89:b6:9a:d6:bf:bc:39:5f:96:a2:a8:73:54:
99:49:4c:50:c3:fa:c9:e5:f2:d9:d0:00:c0:ef:24:
cc:9a:1c:05:ed:a5:1c:51:b2:d2:de:94:89:05:2f:
ea:b2:89:71:3e:9f:3b:68:2d:64:97:8e:96:a9:e3:
8b:06:5e:7d:87:0c:7c:8e:e7:e0:3a:f6:1f:3e:68:
77:a1:76:d9:63:e3:bf:42:e1:49:92:98:1d:e7:f5:
1d:a2:8d:1c:67:81:5d:33:93:7a:35:ed:21:19:75:
b7:e4:2e:b5:90:c2:5f:64:b5:05:de:5e:92:8c:4d:
a2:b1:5d:48:20:e8:3d:00:03:d8:e6:06:f1:30:c9:
62:ba:6e:c5:75:f9:6e:c5:c0:9b:8f:a4:7d:aa:3a:
22:56:d3:d6:ad:69:13:70:57:92:aa:36:dc:2e:02:
a2:04:8c:30:c5:ad:6d:64:dd:f8:d3:62:51:d8:c4:
da:a9:50:6b:1a:44:70:a1:d8:aa:b5:69:d1:59:a6:
ce:62:85:0f:13:0d:a3:be:6a:c9:93:df:9c:35:02:
e3:62:cd:8e:23:8c:a0:2d:9a:15:84:f3:6d:88:77:
25:85:f3:31:8c:cf:91:6d:1d:8d:27:54:cd:85:b5:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:C3:A0:B2:DA:08:FA:BC:E4:8C:23:79:8D:7F:7D:AB:46:E8:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b4b9203-c181-3a01-bc3e-e0d02dc25458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:41:e7:e8:18:62:b5:6c:ba:a3:6a:4a:8b:95:68:6f:3b:ba:
28:e0:ce:eb:32:67:a7:51:98:96:38:7f:95:1c:16:54:71:28:
c4:a8:b3:b0:bf:19:7f:a2:f5:c0:46:92:c2:98:2a:cb:22:2c:
12:5f:9d:5b:97:0d:cc:a7:cf:92:c8:ab:ba:59:52:8e:4f:ce:
bc:86:c0:f4:0d:f6:96:2f:9f:ec:ad:95:13:57:29:6c:64:b2:
6b:f8:38:5d:62:ba:ee:f8:71:ac:4d:7e:41:78:34:0c:98:73:
bf:49:40:ba:b8:8f:61:31:d5:43:5d:95:aa:ca:88:fb:03:c6:
e3:e6:f7:40:3c:26:e9:53:74:9f:fa:f6:d1:68:15:5e:f5:17:
3b:da:15:af:fd:15:aa:1a:dc:f5:e1:c5:bc:e2:e1:a1:8c:9b:
fd:9f:f6:b2:33:b6:22:61:04:67:f0:b8:07:2f:d9:0a:4e:e0:
63:7a:0b:57:b3:64:46:f2:1e:3f:40:e6:61:89:a8:63:42:10:
78:f4:2e:df:fa:b9:8f:e9:9d:57:2c:41:7d:af:20:e3:0c:ef:
69:40:75:be:43:2d:be:88:cf:d6:3a:cc:81:11:e1:a0:8c:d0:
c9:2f:e7:17:94:f7:6a:71:08:f5:a9:87:dd:91:54:66:43:9c:
00:28:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:20 2025 by rpki-client