Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb29f079-be87-37ba-a86f-9316f233c531.roa
File: cb29f079-be87-37ba-a86f-9316f233c531.roa (raw, json)
Hash identifier: oQpJ9CFYgMoxrPCY65+QH4IPWTJlu55p68Q/m3AnY9s=
Subject key identifier: 14:EF:02:1B:2B:7E:4D:CD:11:23:85:60:0E:36:26:AF:B0:32:A5:B6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12541DB6046BA7F45DB180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb29f079-be87-37ba-a86f-9316f233c531.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 73.233.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:54:1d:b6:04:6b:a7:f4:5d:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d86fcbd6-499a-4ffa-8a13-b64cc0377f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:ae:11:7a:6c:3f:8e:10:43:a2:bd:ec:2d:
b2:36:20:bd:71:78:af:6b:ad:bc:25:88:a9:48:72:
9c:72:a9:10:d7:85:5b:53:8c:d1:32:37:15:49:09:
a7:d9:eb:ec:0c:63:91:fb:64:e6:3b:3f:9b:b0:11:
0d:93:77:e6:c6:6e:fa:5e:e0:92:ed:65:d5:42:ac:
05:6b:3d:66:e1:06:93:14:5a:27:ec:6f:60:8d:b5:
9c:1a:e5:e5:9b:a3:73:d7:27:97:82:55:ce:d2:18:
b3:47:36:3e:26:9d:94:a8:3b:7d:fe:11:4a:7d:32:
fe:2a:1a:b7:7c:5f:d0:d4:e3:71:2e:cb:35:0b:c1:
06:65:e0:fd:48:e1:7e:30:be:66:b4:60:96:94:e3:
87:e5:a4:96:59:8e:9f:80:db:17:2c:1a:6e:2e:4f:
66:55:42:80:d6:85:68:a4:bb:60:f7:f2:f8:d8:09:
b0:24:a9:d9:32:f1:e4:8b:9d:99:b6:e8:1e:11:f2:
71:fb:dd:d5:04:cf:5a:10:07:4c:1f:e4:c4:be:a1:
6c:8b:cd:80:15:60:6a:b0:fd:4f:d1:ba:83:b5:83:
65:23:1e:90:98:77:82:bc:04:a8:0a:44:ce:66:b4:
19:4d:f6:33:90:b0:c5:af:86:d2:eb:41:66:db:92:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:02:1B:2B:7E:4D:CD:11:23:85:60:0E:36:26:AF:B0:32:A5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb29f079-be87-37ba-a86f-9316f233c531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.233.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:d6:16:9e:60:d1:c3:60:ff:d0:07:b8:90:c5:aa:36:e3:3f:
47:40:82:00:e2:9e:80:4b:cc:8f:4b:13:3b:9b:a9:54:bb:73:
35:0b:6b:97:3a:0a:c7:23:76:1b:c0:e3:bf:be:09:2d:35:6e:
be:8e:83:c2:19:d2:ce:17:12:ee:c7:53:e9:50:52:80:f0:7e:
31:1d:91:05:93:cd:0f:e1:ee:39:a0:be:6f:c5:ef:0f:08:b2:
52:ee:5f:4b:d8:08:c4:e0:d3:97:75:33:5b:19:73:9c:0e:6d:
eb:2f:52:df:44:71:4c:03:4f:46:1d:40:29:f8:95:8c:08:7f:
fc:65:b1:09:e4:c4:7b:2b:67:10:f4:61:79:46:f4:b7:05:59:
fb:ca:50:d7:87:0a:3e:08:93:f8:54:80:c0:88:70:91:78:2c:
bb:a3:18:39:95:90:53:1f:35:9a:14:a5:6e:49:96:fd:79:1b:
56:69:3f:ab:3c:7e:23:4d:e0:87:7e:03:ec:85:b2:02:1a:89:
49:29:b0:1f:80:02:8e:f3:64:76:c5:c4:6a:86:8a:44:2b:38:
f1:21:36:25:94:50:a5:e1:34:ad:37:4a:04:a9:31:e5:0e:d1:
d4:d1:c8:4e:b4:74:dc:9d:5f:52:a4:b3:d0:bf:24:b1:bf:0b:
ff:e6:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:56 2025 by rpki-client