Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf97803f-4d6e-3611-a959-a707747a610c.roa
File: bf97803f-4d6e-3611-a959-a707747a610c.roa (raw, json)
Hash identifier: 22c7+O4Hgo9tceb1Cv7+GoVdNFAWKjvrvZr95SrzNdg=
Subject key identifier: CA:00:DD:2F:DC:8D:68:91:B1:DA:83:A7:07:4A:86:50:CC:AA:95:0E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BD1AE3307326452823220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf97803f-4d6e-3611-a959-a707747a610c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.32.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:d1:ae:33:07:32:64:52:82:32:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7201c970-0846-4e91-b40b-65dead707f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:f2:69:40:d2:6a:cf:e0:60:fe:9a:08:09:
37:f6:81:de:a9:7e:a3:50:48:c4:f8:13:d2:b0:5a:
6e:30:26:0d:31:8e:9e:86:c9:55:7a:9d:21:1a:9e:
2a:06:c2:1b:e2:40:9c:67:a8:39:47:c5:95:e6:eb:
fb:3d:6b:94:31:89:f1:9c:c9:1d:b1:71:44:d4:00:
ef:a2:34:4f:03:d2:6f:b8:bb:69:c2:a3:de:eb:34:
07:1e:d0:17:98:56:bb:a1:b2:0d:ea:78:39:1a:8a:
59:95:09:4c:da:2d:d8:65:df:eb:a4:7b:35:5d:5d:
8a:30:d6:4b:b7:02:4b:21:fd:41:55:cf:3d:bd:55:
26:e3:96:3d:0e:af:0d:c9:e6:a4:85:31:74:60:fa:
65:83:4a:97:19:18:e8:fb:42:b5:40:e6:62:88:02:
83:1d:46:ba:86:f7:89:b2:91:c9:c3:d4:47:b7:64:
aa:fb:2e:9f:c2:5c:9c:9a:3c:87:85:af:0a:ab:a1:
99:76:72:1e:f3:98:9c:e1:81:54:29:d0:9c:ac:5a:
72:0f:33:41:b4:ca:27:d0:0d:68:4c:28:1f:ce:da:
4d:94:8a:ee:98:60:c1:11:80:da:ab:e3:a6:47:9b:
ca:b0:4a:cd:84:ed:1c:31:eb:fe:4c:7e:32:13:45:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:DD:2F:DC:8D:68:91:B1:DA:83:A7:07:4A:86:50:CC:AA:95:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf97803f-4d6e-3611-a959-a707747a610c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:6a:59:81:fb:50:3d:53:6f:2c:d4:3b:30:0c:2d:4c:0e:c3:
23:48:15:8f:2d:28:3f:c7:41:fd:18:70:ab:e3:16:d3:5d:f1:
ed:bd:d2:33:09:36:57:17:87:8f:fd:cf:c9:6f:81:54:70:68:
a7:84:d2:f4:01:df:13:f3:e0:5b:8a:c2:37:3f:97:32:b5:c9:
c2:b9:44:83:9d:bb:21:00:1e:1e:82:4b:f6:d0:2f:95:bf:39:
91:cc:67:50:bd:e4:2d:44:46:cc:0a:11:2c:9e:c4:79:dd:d2:
ad:5e:82:e1:03:4c:6a:d4:19:de:26:6a:11:3d:30:f8:d4:40:
f1:d4:b3:67:a0:42:e0:f7:dc:df:aa:c4:4b:30:d7:c2:84:68:
3f:4a:e1:b4:22:b9:6d:4c:95:81:cc:86:f9:1d:7f:3c:01:eb:
d8:2e:d6:61:26:20:7b:4a:08:83:e0:89:b6:04:6d:a1:0f:9b:
48:a3:37:df:1c:5e:78:0e:11:ea:87:3e:ce:ee:57:60:e5:e3:
59:a4:61:b9:32:92:25:16:3e:35:1e:3a:7f:f5:63:b5:6b:82:
d2:9b:48:3c:5b:d9:fc:7c:65:8e:fd:97:05:cc:57:1a:e7:e8:
45:26:b4:9c:e7:f6:2a:2a:80:20:0a:94:a6:0f:50:1f:23:a5:
66:32:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:24 2025 by rpki-client