Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a20ad7ec-63f3-3040-b0bf-f45510e3db1f.roa
File: a20ad7ec-63f3-3040-b0bf-f45510e3db1f.roa (raw, json)
Hash identifier: p74Rg0tsA3eKxg9FAC9qh+IKeBh7aqPzGawd3RvZDRA=
Subject key identifier: D3:B5:C6:AD:BC:B4:A1:A2:ED:E0:10:92:43:F2:BD:75:5C:F4:12:C5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12B05C2DC04B3BBC5D9600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a20ad7ec-63f3-3040-b0bf-f45510e3db1f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.211.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:b0:5c:2d:c0:4b:3b:bc:5d:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=321fc853-1f90-480f-b893-3e8814178726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:0d:f1:1b:9d:80:7c:02:fe:f2:ce:1b:b7:
b5:a6:2a:ee:57:5d:fd:7c:1a:86:e0:0f:6d:bc:a2:
ab:93:1a:6b:78:21:d9:1e:f8:44:ca:90:37:e6:4b:
c8:a1:68:60:c0:8f:ce:b2:49:42:35:68:37:8b:94:
67:27:5d:72:ef:3c:cf:9b:36:1a:cb:cb:56:da:c1:
44:c4:38:1b:07:62:a3:57:dd:0a:cb:01:98:55:59:
53:ab:a3:7c:d4:4d:f9:3f:cb:bf:8f:20:1c:da:80:
c4:ab:b4:ff:a5:99:5b:97:cd:d8:5f:2f:a1:76:16:
7a:0e:4f:7c:31:4c:c1:3e:e4:63:74:31:4f:ca:45:
3c:b1:6e:23:43:bd:8a:36:c8:0f:45:2a:35:6a:70:
ee:f8:1a:d3:63:51:e5:0e:f1:3a:67:1d:e5:d9:36:
30:63:a1:d2:dd:72:fb:be:73:eb:25:97:7e:ad:74:
38:ed:bb:15:be:59:23:ac:2a:86:44:e5:76:d3:47:
a3:e3:fe:f2:a9:cc:6d:5b:b6:17:c6:2d:af:84:f3:
de:9a:a9:38:3d:0c:81:1b:42:8a:f1:5e:9d:f4:f3:
68:99:6d:6a:84:99:c9:c4:64:14:09:3b:fa:91:3b:
d8:29:f3:48:b6:f3:e6:c9:3a:05:f8:5d:e6:8b:4e:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:C6:AD:BC:B4:A1:A2:ED:E0:10:92:43:F2:BD:75:5C:F4:12:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a20ad7ec-63f3-3040-b0bf-f45510e3db1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.211.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:cb:7e:f5:73:8c:fc:5d:99:f3:7c:41:7e:3d:cb:c3:3e:8a:
0d:dc:e5:bc:bd:0b:e7:14:06:8c:1a:fa:3c:e6:5d:2d:5a:18:
13:08:c7:37:36:af:c5:dd:37:19:fd:8d:df:3c:5c:c8:b4:e9:
bc:85:7c:82:13:a8:60:3f:c6:a9:41:da:53:87:d6:e4:ba:ba:
28:50:94:5e:cc:be:f6:c8:19:db:ef:07:4e:a4:bf:5f:1a:26:
bc:a4:aa:b3:4c:1f:52:3c:f7:47:c5:7c:96:34:04:bb:cc:46:
e4:28:15:62:e7:00:84:4e:71:7d:36:0c:5b:45:60:40:0c:ed:
a4:8f:76:55:5a:c9:d1:c5:e9:d2:6a:4f:79:92:86:55:ad:46:
db:df:1a:6a:e0:9d:6a:cb:35:25:da:60:90:5c:83:93:4d:fa:
15:1d:37:98:61:f4:0e:01:f9:a4:82:c4:31:8d:56:b1:22:06:
b0:97:e3:6d:3f:65:93:b5:ee:a2:01:bc:ac:1c:20:79:75:2b:
e4:4e:db:96:10:b4:af:e3:74:a9:35:6b:32:79:f0:84:a7:b9:
a6:3d:98:76:5f:bd:5c:ce:e6:41:69:de:29:5f:46:e5:e4:1a:
0f:c1:6a:92:47:7d:82:25:1d:df:d5:08:e5:0e:aa:d1:e5:89:
ff:95:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:37:40 2025 by rpki-client