Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c10e8adf-159c-35af-976f-cbdbe321b8ec.roa
File: c10e8adf-159c-35af-976f-cbdbe321b8ec.roa (raw, json)
Hash identifier: LC38AV2uvxk3F8lvPrFpM71KmeU1aQlkLcU6WwSYC14=
Subject key identifier: 85:5B:AB:44:F8:B0:32:6C:39:1C:85:D6:2E:9B:2F:E9:9E:37:46:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11317A56BC46B731C58E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c10e8adf-159c-35af-976f-cbdbe321b8ec.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.9.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:31:7a:56:bc:46:b7:31:c5:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0bf4c25d-5bd6-490e-bd16-b8cb9cc33572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:6f:14:35:ba:46:b2:80:05:f0:22:dc:68:
1b:6b:c2:0b:a3:17:57:1a:82:06:de:a7:8b:89:01:
ce:4b:2f:b0:fd:c6:0f:08:c8:4f:77:e3:c4:08:ec:
05:e5:a9:c8:03:28:37:a5:e9:23:a2:a1:fa:b0:64:
ec:4b:16:7b:c3:4e:e1:00:32:25:3b:34:fd:40:e7:
79:d1:6c:88:4a:2f:36:b3:8a:4a:ec:78:aa:db:dc:
97:73:7c:40:0e:54:be:ff:d8:bf:d5:06:b4:4b:30:
de:fa:ad:eb:f5:f4:5d:34:22:9e:e3:2a:13:87:77:
ca:34:65:a8:85:df:6c:ca:71:b0:bb:5d:e6:cf:bb:
bc:fa:b9:ff:2c:fd:37:a8:c2:a9:6e:2a:0a:f5:9e:
bf:75:bd:e6:f4:81:c5:fd:d8:a5:86:b5:d1:d4:b7:
cf:90:16:82:47:ef:7a:6b:63:69:b0:22:f2:cb:17:
b9:02:ef:e1:a6:c9:40:9b:2a:be:05:a1:56:24:4b:
45:cc:b2:10:46:ed:49:9e:6d:c6:1e:00:df:6b:7d:
5f:43:f3:15:67:c8:00:7e:62:5d:0d:ef:c3:77:e0:
e2:60:48:46:23:85:cd:16:93:2b:73:0e:54:c3:87:
84:b7:02:88:30:80:cd:0a:78:3c:fc:c0:a8:89:35:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:AB:44:F8:B0:32:6C:39:1C:85:D6:2E:9B:2F:E9:9E:37:46:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c10e8adf-159c-35af-976f-cbdbe321b8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.9.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b1:cf:1e:e8:fe:64:3c:12:2e:b0:49:e5:a2:a8:6b:79:c2:
fe:22:95:52:ce:da:ac:4c:9a:ab:a7:5d:99:de:e5:d5:66:bf:
5a:55:9a:f4:0b:8a:76:e3:26:d2:c9:e1:b6:85:fe:d3:45:d5:
9b:2a:f0:66:a0:b9:ef:09:be:6f:0b:f8:71:e1:b5:86:f5:36:
b1:ed:ef:a7:24:0c:0a:f7:ea:25:18:df:d0:4f:73:d4:48:a9:
15:81:d9:2d:8f:d3:f5:d3:d5:cc:9d:ee:db:b4:01:db:f5:d3:
9a:ca:3f:51:b6:35:00:7a:f7:8d:26:af:8a:3e:7c:fe:23:ed:
53:ea:5c:1a:1e:7a:bd:88:2e:bb:cd:ce:97:0c:85:81:98:a6:
96:a1:11:7c:94:3b:b3:73:73:59:4f:94:57:e2:99:b7:b5:48:
73:e5:e7:a2:bf:48:db:ef:b3:ca:1d:1f:b7:e3:a3:c3:c3:1c:
38:a0:ee:83:15:8a:b6:c4:db:67:94:78:40:dd:45:22:bb:c1:
a4:8a:d1:36:33:7f:bc:3c:70:29:59:4e:b3:4f:c8:fb:8d:ea:
a9:09:9b:b3:28:86:c8:a8:f7:88:8b:8e:93:1d:51:df:86:92:
5a:bc:b0:07:2a:a2:b3:d7:7b:56:c7:64:e6:5a:0d:a1:9e:f9:
ad:9f:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:06 2025 by rpki-client