Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac68461-96cd-3abc-85dd-92c9052e11a0.roa
File: aac68461-96cd-3abc-85dd-92c9052e11a0.roa (raw, json)
Hash identifier: kjWkHwT97e0nyp/l2pZuY7NwrygzyzyirTibtuXRt0I=
Subject key identifier: 3C:E9:03:2E:83:84:4F:D3:B3:A9:0C:DA:17:C3:C3:61:89:07:EE:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B76418DC117E75BDC0F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac68461-96cd-3abc-85dd-92c9052e11a0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.18.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:76:41:8d:c1:17:e7:5b:dc:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f4d38b4d-4565-4827-ada2-59c9b304fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:94:46:51:34:ba:43:4a:e0:73:bf:8f:ff:
c2:c5:e8:64:2d:ce:e8:d9:54:45:24:9b:42:44:bf:
58:d2:5c:24:a2:c1:95:82:40:ff:8e:51:f9:5d:de:
be:e1:64:16:ee:a3:7e:79:fd:a3:f8:47:da:2e:37:
96:61:02:9f:95:21:05:c9:87:5b:9e:11:43:ca:4b:
98:57:0e:aa:d3:d1:b0:bd:56:0a:f9:df:e3:98:af:
85:a1:d8:64:93:d0:da:96:f0:72:13:e3:f7:41:24:
e1:9c:65:0c:24:e1:35:8d:75:45:d4:d8:1c:84:3d:
cc:5b:e8:3b:1d:e7:56:e9:ab:46:15:83:d2:a1:66:
4d:49:7c:c1:39:d9:fd:11:f2:07:db:e0:66:e4:2f:
15:c7:51:57:a2:b4:1c:48:0f:17:50:51:b3:a9:67:
02:d3:90:15:37:c5:90:90:88:b8:eb:7a:8e:51:f1:
0c:a1:26:db:ea:2a:0d:52:8e:74:39:57:d4:a7:f6:
b2:16:06:0e:02:51:18:85:c6:bf:c4:91:a3:e0:5b:
3f:6e:94:41:e1:f8:5d:61:e4:44:b4:d7:98:6f:36:
8f:92:80:80:e9:93:ef:32:ab:bb:38:3f:96:1a:16:
f6:f1:f7:97:91:66:3d:03:f5:92:04:e0:11:dd:8b:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:03:2E:83:84:4F:D3:B3:A9:0C:DA:17:C3:C3:61:89:07:EE:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac68461-96cd-3abc-85dd-92c9052e11a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.18.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:3a:56:c2:78:3c:34:01:36:72:b5:70:9f:6d:95:36:bd:3f:
23:29:49:06:d8:7f:b9:10:54:74:c0:a3:56:0e:eb:cb:8f:ec:
58:f4:62:9e:8a:77:10:3b:d1:65:f2:76:a8:2c:ba:ea:b3:1f:
34:25:1c:d2:86:75:3d:ad:d4:5e:a2:e0:87:03:b3:9e:f6:d1:
a8:15:47:1a:88:10:cf:dc:e7:02:92:16:89:03:5b:f3:59:d0:
7b:8e:05:b0:bb:38:41:11:5c:85:7b:7a:70:07:f6:24:19:3a:
ba:ea:ed:7f:e4:3a:81:73:ac:d9:5f:60:a6:48:4a:3e:61:65:
7b:3d:dc:6a:7a:68:a1:e9:72:0b:35:48:84:46:bb:ec:fd:ff:
8b:0a:ff:4a:2f:11:a7:41:80:ac:cd:1c:44:cb:62:de:ce:0b:
b5:dd:fb:c1:a5:19:67:de:17:cb:68:fa:02:81:36:99:88:f1:
17:cc:78:03:14:aa:a2:f4:6d:3b:d3:c6:3d:f1:ff:55:6f:82:
c3:a1:ac:71:c2:4a:fa:98:6f:9d:bb:78:20:47:7c:67:87:eb:
ae:0a:42:f7:44:c0:32:57:18:5a:a0:3f:54:a1:d8:51:ca:c9:
85:92:83:90:b5:95:d9:06:65:fd:84:67:e1:e4:06:fb:eb:55:
4d:1e:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:01 2025 by rpki-client