Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb4c33f-eb05-37c2-ab55-bdba2c97475a.roa
File: afb4c33f-eb05-37c2-ab55-bdba2c97475a.roa (raw, json)
Hash identifier: gNYGctOQz5nN/bv+9ewBx760v1+3BhCQqRLYq48KcI4=
Subject key identifier: 8E:3F:FC:DD:91:9A:C8:FC:3C:D7:DB:C4:16:EB:39:8A:B7:27:8B:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11082FE3AECAECB37B2EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb4c33f-eb05-37c2-ab55-bdba2c97475a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:08:2f:e3:ae:ca:ec:b3:7b:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=30604cff-6bc4-4488-aff8-481eb31d9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:17:80:29:3c:ca:d2:7f:31:e1:4e:27:23:
39:e2:4e:c2:59:26:80:2b:f0:d9:93:8c:52:92:84:
a2:c1:0b:52:22:1c:f2:15:e9:c3:a2:45:78:37:45:
ed:ba:2b:d2:9c:00:3f:cc:f2:3a:45:72:37:94:0b:
9c:ec:82:ff:0e:14:ea:52:52:e4:67:4a:ae:29:22:
63:18:5b:30:df:8c:ab:9b:f9:33:07:ac:cf:7c:fa:
91:6c:39:74:8a:da:52:a9:02:0d:4f:41:e9:55:c3:
38:c6:68:3c:54:6d:81:1c:23:92:a5:e7:96:1d:b4:
c6:1a:1c:9b:cf:83:2b:45:11:3c:58:21:e5:81:99:
71:16:82:2c:36:6b:b8:5c:2b:dd:70:38:02:08:e7:
84:3b:a9:89:49:83:00:d4:6e:7e:b0:2d:20:9c:79:
48:b1:e6:62:23:89:3c:c5:1c:90:f5:87:bf:a1:b9:
7f:a6:0e:96:7c:f0:89:38:bc:c5:bb:25:5c:bf:c3:
d7:c7:41:91:78:8b:81:64:d1:5c:51:62:a1:72:15:
79:50:5e:4c:b3:75:83:ab:52:5f:38:3d:88:4f:7e:
cf:bb:c9:30:11:02:ba:97:83:41:27:3d:8e:b9:31:
29:16:12:07:62:58:2f:24:e0:7b:0f:5f:c3:7c:76:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:FC:DD:91:9A:C8:FC:3C:D7:DB:C4:16:EB:39:8A:B7:27:8B:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb4c33f-eb05-37c2-ab55-bdba2c97475a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:86:cf:a1:65:c6:a5:eb:e2:73:35:27:b7:de:a9:e8:3e:0d:
27:4f:fc:37:8c:55:d0:e0:60:55:a3:4d:4b:21:ce:f1:3e:04:
b2:a8:36:3e:e7:76:dc:b3:b1:fd:17:a5:4d:b5:26:70:38:65:
e8:1c:64:89:3e:f2:90:4a:71:9b:d8:c8:66:62:91:a7:2e:d6:
39:d0:68:55:b2:b0:61:af:3b:a8:f0:31:88:f6:4e:93:c0:99:
b4:36:ce:66:7c:6b:a5:22:b5:a1:76:c8:be:ca:0e:b2:28:d3:
0b:2e:83:15:1f:16:f7:0c:7b:fd:ce:ea:8a:94:70:8b:40:e0:
0a:64:43:00:91:13:c7:85:54:e7:38:a3:f5:c6:c9:a7:81:0a:
7d:6d:a5:26:dc:44:a1:63:2a:f4:b9:1a:de:1f:3d:05:fe:fa:
54:d1:46:21:97:0a:61:ad:50:b9:83:e6:f6:fe:71:12:c4:72:
ee:a1:d2:74:be:0b:b5:c3:11:94:b1:49:b9:91:e3:a2:cc:ae:
06:8e:2c:68:f2:a9:f5:e3:8c:1c:33:d8:a6:ba:c9:2b:ed:40:
f6:b2:b9:28:fb:b1:25:8d:82:21:de:20:d3:75:fc:3c:46:24:
9b:9e:70:fa:e3:66:ad:4e:fb:3f:bf:c8:82:97:2d:bc:70:8e:
54:7e:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:01:03 2025 by rpki-client