Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09123b9-5a85-3e2d-b49c-c41be4ee3bb0.roa
File: a09123b9-5a85-3e2d-b49c-c41be4ee3bb0.roa (raw, json)
Hash identifier: s//3d1dUSQqA/yaPwae8sBgUSZSs0cYBvy3XCjWTHkI=
Subject key identifier: 9F:18:E5:47:5C:C7:0E:E5:62:D8:D7:F6:20:39:FC:61:A0:98:7A:2F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C110E9030C05F4B8C10A900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09123b9-5a85-3e2d-b49c-c41be4ee3bb0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.211.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:0e:90:30:c0:5f:4b:8c:10:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=049b7dbe-088f-4ab6-9adb-ca69e5645723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:77:81:5a:2f:53:57:97:df:96:df:8b:7c:
46:c5:a5:3c:08:f8:eb:2d:2e:55:9b:24:03:2b:17:
72:19:9f:d2:48:ec:ce:fc:ad:95:2b:01:89:5f:3a:
45:1e:92:ab:8a:09:52:72:33:1d:e1:64:fe:76:ed:
4d:1f:70:43:2a:cb:30:94:c4:19:a8:da:a6:3b:d0:
0a:98:ba:17:15:ae:f1:46:dd:c5:e4:cb:bd:bc:80:
93:e4:81:6d:ea:2b:b3:2f:0f:50:c2:12:12:6f:7f:
ed:20:f9:a1:c1:41:64:83:65:2b:13:bb:31:2b:ef:
b1:96:26:c6:53:5a:65:62:8a:23:30:c6:f7:b5:49:
4c:05:96:1c:ef:51:a6:67:d5:b4:55:ba:0f:f2:af:
57:eb:78:af:47:df:cd:6d:07:c5:9c:5d:bd:43:f6:
f0:02:9b:01:78:66:d9:53:46:92:76:d8:bf:6a:f8:
8e:32:e1:cf:23:09:10:d9:3d:3e:cc:fb:e3:33:59:
d4:e8:e3:d1:30:22:96:92:12:b7:9a:c3:52:ce:41:
7d:16:77:4a:d7:f1:36:73:95:e7:fe:ca:45:7b:7d:
3b:2d:d0:52:97:71:d3:c6:58:58:86:f9:69:0d:55:
89:fc:c1:e6:24:e0:3c:f3:8f:e9:1c:07:8d:0b:41:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:E5:47:5C:C7:0E:E5:62:D8:D7:F6:20:39:FC:61:A0:98:7A:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09123b9-5a85-3e2d-b49c-c41be4ee3bb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.211.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:7e:a8:26:ee:c6:b8:76:c9:8d:e8:ad:5d:b1:4e:26:b9:80:
06:da:a2:7f:ed:e1:15:35:92:2d:08:80:8a:b3:72:f0:9c:53:
af:c5:8a:7b:ed:77:91:95:14:87:c6:da:72:0d:b7:39:3a:53:
6c:05:e7:03:08:4c:12:f0:c2:f1:f8:4e:8a:f3:3e:97:6d:1b:
10:e7:6d:7c:9f:d7:c8:60:ac:0c:df:6b:3b:71:4f:6e:88:d4:
94:df:b9:71:b3:eb:13:db:dc:10:69:30:85:cc:93:aa:be:9b:
f2:b4:3a:57:9c:2d:c9:32:21:83:98:08:00:8e:fd:4c:40:fd:
a1:56:93:8f:14:33:2b:49:7a:98:cf:3f:7f:a8:69:c7:97:64:
00:ac:b6:39:c0:1d:ab:cc:72:23:4f:d4:54:a5:75:a3:44:6f:
fe:1b:97:d6:d7:4a:38:e1:66:72:de:21:11:a2:9e:01:e8:4b:
d5:f6:a5:d3:52:f0:0d:e3:18:20:ac:c1:47:44:11:38:94:32:
9b:8b:f1:09:54:f0:b3:de:af:a6:49:b1:d9:8b:38:3c:54:e2:
40:9a:51:75:5f:20:56:55:2d:47:19:88:07:2d:e8:fd:60:01:
50:06:48:db:5f:2b:4d:bd:c3:91:2d:fa:9d:ae:37:0a:ca:30:
a8:8b:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:50 2025 by rpki-client