Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a216bd09-2079-3dc6-9f98-f7b7d40c63eb.roa
File: a216bd09-2079-3dc6-9f98-f7b7d40c63eb.roa (raw, json)
Hash identifier: n1RnX1A/6oOH2AWLAke3W2MG5zhvViIfZ2XPgJoPOYc=
Subject key identifier: E3:91:D9:59:CF:C9:34:E2:70:2D:9A:08:17:C3:33:61:A5:79:7B:86
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13E83877C4A4025418C8A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a216bd09-2079-3dc6-9f98-f7b7d40c63eb.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.170.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:e8:38:77:c4:a4:02:54:18:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a350ef9d-9dff-4777-8dcf-a71334508ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:c9:6e:52:ad:5d:e7:03:32:72:0c:b6:54:
36:4f:df:e7:c3:a8:e6:d0:c5:b7:4e:4d:15:0a:36:
74:5d:79:0b:58:fc:43:42:96:99:4b:fe:d5:d3:2a:
04:05:c6:47:80:79:99:63:6d:53:56:46:fb:76:bf:
13:b3:9c:80:2a:f5:ce:af:a2:a6:69:04:c7:42:a7:
a4:ca:4b:1b:cb:47:51:04:63:0f:be:8a:fc:c2:11:
13:47:b0:a8:b7:d2:cc:68:73:a0:5e:ab:53:1f:9e:
8c:20:b9:c1:fb:11:8a:1d:29:fb:2d:1e:ad:e4:33:
51:7d:ba:cb:43:a8:0f:40:12:82:5c:58:e5:8c:7b:
77:d6:d3:a8:7b:97:d9:18:6f:38:59:de:5d:aa:90:
8d:34:88:80:5e:85:5d:aa:2b:6c:63:7a:ea:ac:8e:
8d:e7:18:d4:cc:d7:82:46:f3:2e:d1:ca:dc:c2:7d:
d9:ee:56:91:eb:b8:b2:83:10:49:60:7a:ef:25:71:
82:e5:11:15:e9:4e:9d:27:6b:7f:a5:f0:fc:c4:0c:
26:5e:dc:f6:d5:74:1d:cd:56:10:b3:00:e4:e9:7c:
cc:a8:b8:b8:39:84:ba:5b:50:3e:ce:81:a0:43:c1:
3f:ef:6f:d9:e3:17:32:53:a6:3a:06:58:a9:81:5f:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:D9:59:CF:C9:34:E2:70:2D:9A:08:17:C3:33:61:A5:79:7B:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a216bd09-2079-3dc6-9f98-f7b7d40c63eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b5:7a:c3:9a:4d:a4:05:52:f2:f3:47:ea:82:34:7c:91:02:
83:ee:1d:cc:f5:88:17:15:dc:e7:71:82:50:88:a3:43:78:a2:
7b:bc:09:20:b8:c5:90:cc:35:5a:2a:86:5c:1f:a7:44:dd:f3:
50:dc:37:30:6c:41:1f:80:78:0c:da:c5:3f:1e:dc:e6:c2:3a:
c5:a1:5f:aa:37:b4:1d:0d:02:bf:f5:fd:57:b0:34:0e:3c:90:
6b:28:63:ef:5d:73:39:e9:c2:c3:2c:58:e7:a8:cf:f8:6f:6d:
b4:69:fb:48:11:fe:a4:25:fe:e4:dd:91:44:4c:e1:b7:22:3d:
c8:0e:cb:37:25:7c:23:b7:d4:28:52:ba:c9:60:a9:78:b0:dc:
2f:22:06:f7:22:a1:e2:35:25:c9:b3:3d:17:39:30:29:33:5a:
d7:8b:1e:6a:d2:79:47:e1:7a:6c:a3:19:39:e7:9b:91:ce:ce:
80:65:5a:67:23:63:20:62:e2:82:13:93:54:45:81:42:27:a4:
d8:62:96:73:6d:e6:3e:ea:36:78:23:01:77:05:11:8e:91:63:
88:bc:fd:04:87:a4:97:8f:3a:67:2f:3e:1c:b5:d3:93:00:1d:
6e:d9:99:d0:6b:c8:e5:60:a4:3d:81:a3:d9:42:9e:96:75:97:
78:93:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:35 2025 by rpki-client