Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afed7a60-9e14-3939-b1a3-0700d0b42ef7.roa
File: afed7a60-9e14-3939-b1a3-0700d0b42ef7.roa (raw, json)
Hash identifier: xtJzuLjd1sco8D+iLxvB6bn+xj/hDTlHMXT8+BaFips=
Subject key identifier: 28:90:27:D7:E1:30:CC:21:96:B4:D9:69:A6:4B:C3:1C:94:A3:BD:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11DF74D500AF1AEE5BAD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afed7a60-9e14-3939-b1a3-0700d0b42ef7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 73.65.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:df:74:d5:00:af:1a:ee:5b:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1c1f70e4-8550-4151-a942-bafbf10cba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:12:85:8d:a6:37:d1:39:13:bd:f9:cb:b9:
a6:6f:52:70:de:1d:32:05:c2:eb:b6:0a:ac:11:82:
f6:03:2c:3a:da:fd:58:ae:68:bb:e2:76:c4:b8:f6:
6a:cb:a5:b0:89:44:78:9b:f6:c9:ac:af:4b:ae:7d:
3a:d8:e1:48:83:9a:c7:e7:73:ce:92:94:16:df:d4:
26:84:4d:86:25:d2:14:95:8f:17:36:74:a9:67:a6:
d3:46:11:6f:b1:cf:d1:37:a2:f1:c9:89:18:67:39:
74:16:c5:88:33:6d:91:9b:a9:9f:a7:be:dd:c9:a6:
cc:c6:13:41:6d:c7:66:6d:80:b2:af:b5:9f:5a:59:
63:e3:40:a6:58:31:a1:65:39:4e:84:c6:5e:f5:6a:
d9:40:1f:24:ca:79:19:36:00:4f:85:11:2b:c2:18:
23:63:8b:c8:57:86:bc:72:32:4a:da:2f:10:ed:bc:
90:16:4e:f7:00:ed:37:72:c2:c0:17:55:69:25:18:
bf:d6:8e:f4:0e:68:aa:9f:bf:b0:12:2d:d8:b8:0b:
e7:1e:87:f2:79:f5:00:d5:a8:63:ca:bb:4c:a9:3b:
8e:7e:29:d7:37:ad:94:e5:42:b6:de:d5:6f:e1:ed:
69:a0:a2:33:6a:cc:ed:6a:dc:21:99:f3:4a:7b:f3:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:27:D7:E1:30:CC:21:96:B4:D9:69:A6:4B:C3:1C:94:A3:BD:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afed7a60-9e14-3939-b1a3-0700d0b42ef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.65.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:07:f2:b3:01:e6:07:7b:9a:79:b5:e5:7d:6c:cd:34:18:86:
38:31:41:11:18:c2:81:5d:ef:46:62:0a:07:99:3c:4b:5f:0c:
7a:29:71:f9:72:08:94:50:a1:76:83:91:ca:f8:63:54:61:ed:
df:4e:a2:42:1f:ff:d2:3d:b8:82:36:d8:3e:c8:14:1a:26:6a:
bf:72:68:ff:85:65:95:07:b8:3f:9d:8f:8f:73:31:7d:8e:52:
6d:71:b9:e9:23:89:36:26:bc:92:de:17:b8:88:18:f1:4d:52:
bd:d9:e6:b9:83:4e:3e:06:7b:e7:41:54:54:56:0f:52:81:f7:
36:87:dd:ff:c7:cc:68:5c:60:d8:13:02:2f:67:0b:73:90:74:
e2:86:ff:62:ca:6a:7b:62:88:b4:cf:32:b5:39:ba:c4:a7:d9:
94:64:a5:8f:b9:91:ce:09:20:43:e1:aa:3b:ac:38:ea:3c:9f:
fa:21:5f:8e:60:92:4a:d6:12:c5:78:52:9d:3f:b9:cb:c9:73:
18:81:19:09:39:56:cf:96:ce:14:b8:25:bf:b2:3b:9d:3b:89:
f0:6c:bc:6e:ce:08:fb:90:97:11:5d:1b:18:e3:0d:ca:3a:a4:
76:45:66:64:0d:28:30:42:20:43:b8:78:b3:0b:43:4f:03:ab:
b6:8e:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:22 2025 by rpki-client