Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa
File: d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa (raw, json)
Hash identifier: bjt0oY0e12zBPdKy85jmx0jzpPAqr7+A/C4QTP/sMk8=
Subject key identifier: 40:DB:2F:E8:3D:DE:D1:F9:2D:7B:ED:15:A2:ED:E2:D0:CB:09:5C:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12991FB3E3C4CB068AF300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.111.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:99:1f:b3:e3:c4:cb:06:8a:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=70ebb588-476f-4913-9e9c-6c663e78d646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:5e:93:42:d4:e1:c1:72:66:82:43:13:60:
cd:fa:51:e2:5a:2c:02:0d:bc:29:0f:79:44:c6:c9:
ea:b6:8f:c9:32:d0:47:30:82:f7:47:78:e1:b1:ae:
99:64:35:31:c0:6d:58:5e:08:8f:7f:57:a5:5f:5c:
38:c1:a1:69:a5:d9:45:9a:ba:d2:03:24:a9:31:a8:
09:49:06:84:2d:69:10:21:a8:52:24:43:0f:34:60:
80:e7:7b:c0:a9:01:a3:1c:b1:0f:78:4d:2b:14:81:
33:dc:c3:d9:aa:4c:14:a3:96:78:38:9b:bc:77:14:
df:3f:08:dc:3a:a1:c5:14:dc:cb:82:ce:f7:f1:ab:
24:0f:7c:04:67:fc:2e:40:57:df:60:5f:a3:6e:98:
53:f7:3c:5d:76:61:28:eb:85:66:ab:a4:b6:c5:6a:
f4:d2:35:b2:a5:62:fe:3b:1f:a7:70:40:65:f8:30:
98:9a:8d:af:3e:61:e4:5e:50:d7:d5:ea:ac:75:93:
99:d4:04:82:15:06:5e:f7:ac:7c:12:fa:1f:fb:bd:
3d:32:69:c4:35:f9:05:fc:56:80:ff:f3:84:8d:9f:
89:13:67:2d:16:b5:aa:e4:91:56:cb:53:66:27:b1:
e7:24:1e:0a:23:e3:b7:cf:1e:ba:93:9d:8a:a8:fe:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:2F:E8:3D:DE:D1:F9:2D:7B:ED:15:A2:ED:E2:D0:CB:09:5C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.111.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ab:94:30:f1:a7:d0:19:e6:4c:4f:42:2f:86:2b:48:ad:72:
3c:b2:b4:a7:15:05:6d:46:ea:49:3b:5d:21:b2:2c:be:d9:ee:
33:26:b0:e9:7e:af:b0:c4:90:0e:44:82:ac:12:6f:95:f3:e4:
cb:b7:cc:24:bf:5f:b2:fb:f2:5f:69:a5:72:b9:8c:c6:15:df:
74:d8:1e:26:02:d9:ba:4d:d1:db:db:eb:32:69:1c:b1:00:05:
5b:9c:ff:bf:53:c0:2c:d5:0a:b6:c7:16:4f:6c:37:70:2e:aa:
eb:18:d9:bd:f0:3b:ab:7f:6f:5b:06:b3:dd:34:22:70:0b:23:
75:64:c5:bb:d4:81:11:8d:fa:92:03:ae:43:8d:96:4a:01:cd:
cd:13:5b:f8:d5:8a:9e:a9:18:87:14:97:01:ca:f0:01:12:0e:
3e:e0:76:c7:ff:f4:a0:9c:c0:c5:f1:b4:54:78:58:66:3a:47:
18:34:36:f8:2c:8a:9f:31:de:dd:96:46:2b:a0:88:98:d4:74:
c9:57:a1:86:e4:a2:4e:35:0b:18:af:38:b2:2a:78:ce:ba:c5:
70:1f:db:bd:31:a0:39:e4:64:10:b6:ed:7a:23:bf:ad:eb:cc:
86:ff:23:63:2a:36:47:17:0f:46:16:a1:04:14:17:2b:da:10:
a3:eb:c3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:16 2025 by rpki-client