Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5e6f78-ee9e-3a1b-ab07-afff042be953.roa
File: be5e6f78-ee9e-3a1b-ab07-afff042be953.roa (raw, json)
Hash identifier: 6GLvNrhRUO0w2um78VeOonhx1p/ZCc0VzE7QkgBXFOw=
Subject key identifier: 4E:DF:27:C9:18:F9:4A:24:F1:EA:12:82:BC:F8:9B:25:6D:CF:87:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FDCFD677A552F06E24500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5e6f78-ee9e-3a1b-ab07-afff042be953.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.166.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:dc:fd:67:7a:55:2f:06:e2:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d03ce9f8-bdf7-4910-8b38-52d439a27409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:f6:1e:d2:c6:ee:3a:3f:04:4b:e3:1e:45:
9d:ea:39:f1:b6:9c:43:99:42:7c:bb:3b:83:e8:42:
74:db:b6:88:c6:ac:51:fb:55:6c:42:f6:d4:c0:c7:
7f:34:a0:2b:32:8b:8c:b7:e7:39:74:4d:24:89:54:
48:37:7e:bc:ec:79:fc:28:b7:83:e6:b0:94:36:e4:
b1:c1:24:35:52:d0:2c:98:31:f3:26:fb:ef:77:a7:
bb:67:3c:cc:ff:77:fd:99:33:aa:f7:05:71:3f:c7:
b3:74:60:d5:b9:46:fc:54:d9:9c:cf:47:ca:a5:2a:
d1:98:85:0f:fa:2c:8a:6d:6b:63:93:bb:20:b5:51:
a2:ed:ff:36:24:8b:e7:42:32:b6:ef:06:1e:65:f6:
60:f9:18:73:2f:ed:a1:4c:0f:88:6f:c8:d9:cd:c5:
c8:82:c5:40:59:53:e6:c7:8d:2c:ad:b3:2c:fc:38:
e6:2e:7e:7e:96:8d:9c:ac:ef:f7:eb:8b:4a:b9:35:
f6:24:56:cf:cb:59:e1:af:03:32:86:96:1f:93:c4:
df:e9:c9:ac:3a:ef:96:d5:c4:9c:81:c2:d9:bd:6f:
6d:59:3c:b8:bd:47:ae:24:7c:83:fa:31:bf:0a:04:
42:1f:c4:aa:ec:69:b0:58:8d:f6:2a:fc:0f:78:aa:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:27:C9:18:F9:4A:24:F1:EA:12:82:BC:F8:9B:25:6D:CF:87:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5e6f78-ee9e-3a1b-ab07-afff042be953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.166.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:f5:46:c1:f9:35:10:5f:d5:1f:a8:e0:5e:46:58:0b:a3:1c:
52:7d:5b:1a:80:2c:94:62:54:91:0d:c0:6f:63:b1:db:c3:9c:
1a:34:2c:60:1b:78:a6:fa:23:9a:5d:16:c5:18:40:5c:35:ae:
36:c3:aa:35:0e:5f:4f:51:b1:23:64:09:12:1e:6d:00:68:39:
f9:02:57:77:ed:66:58:56:4a:85:f5:73:cf:8f:8e:fa:8e:99:
ec:7a:a8:b2:d6:de:05:db:30:01:2a:ae:d9:99:9c:0d:6f:bd:
08:19:e8:18:18:ec:02:e0:e7:18:93:9d:03:d0:d2:bf:1f:45:
e7:53:9b:d6:7b:29:89:91:40:26:4a:f2:a6:64:27:58:2d:8b:
33:dc:25:48:4a:99:d8:8c:e2:05:24:dc:72:e7:99:d7:04:6d:
ce:b1:86:cf:d5:76:9c:3f:88:7b:a7:02:b8:4d:99:6c:be:a9:
fc:fa:24:ba:db:aa:52:75:d3:c8:5d:49:3f:1a:b9:7a:47:01:
d4:93:5a:fa:1b:fa:5b:8d:24:64:88:3a:c0:31:c4:27:01:0f:
8e:a1:bb:92:51:12:b7:5f:5c:76:1c:a6:40:63:db:b5:11:d1:
75:67:61:58:27:b9:50:20:59:1e:48:97:bf:98:ee:68:97:60:
aa:a3:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:36 2025 by rpki-client