Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71b63e6-8030-3845-88f3-3155cb5e2981.roa
File: d71b63e6-8030-3845-88f3-3155cb5e2981.roa (raw, json)
Hash identifier: V50vHp+8wq3ZMhRLbzVfIIqTc+I35xRQv5ZvvZ22hP0=
Subject key identifier: 65:ED:71:DE:67:80:3A:D5:40:04:CD:12:BD:1A:25:8A:04:18:89:FB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12A830323E47EC3CD26B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71b63e6-8030-3845-88f3-3155cb5e2981.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:a8:30:32:3e:47:ec:3c:d2:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3bf3c9bc-4c2f-4324-93c9-8400720ea849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:91:d3:01:1e:dc:8b:58:7f:18:60:8c:ff:
bc:5d:7d:80:24:39:e7:24:3b:02:9f:bd:e9:84:a7:
ae:8e:a5:29:06:6e:f2:80:5c:25:ea:9a:cd:bc:08:
d9:d0:2e:98:56:67:a2:0c:b8:6c:61:30:73:1f:5b:
a9:a7:06:76:51:9a:d5:ec:63:7b:c8:dc:ff:a9:8e:
a2:52:c7:5e:55:05:10:ab:77:31:55:95:a0:8d:74:
2c:76:64:fa:43:b7:f6:ae:0c:b2:cb:cc:04:47:f5:
ca:2c:9d:97:eb:71:27:e6:9f:3a:5c:c9:89:f7:c0:
fe:32:be:ec:1f:c4:a8:e6:1e:c6:f3:3b:bd:04:29:
b5:64:9f:80:bb:5f:12:e9:d2:fd:25:92:b4:df:bc:
5d:a3:b0:7e:22:27:6e:5c:71:80:f1:ab:6d:6d:14:
ff:d7:80:3b:7b:cc:4f:ce:35:e8:ac:42:57:10:87:
67:6f:35:b3:bf:cd:4e:50:ec:62:2c:17:50:ae:56:
2d:f5:11:55:53:4e:5b:25:cc:8b:1b:73:cc:24:4e:
40:46:f1:b5:a2:06:99:b9:c9:a2:59:1e:e7:8b:8a:
43:0e:9f:bf:08:62:fc:a0:90:9c:2a:a0:13:08:b9:
74:a7:e8:62:35:f3:e0:43:58:50:97:64:d4:34:f7:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:ED:71:DE:67:80:3A:D5:40:04:CD:12:BD:1A:25:8A:04:18:89:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71b63e6-8030-3845-88f3-3155cb5e2981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:88:58:1d:9b:4f:d9:9c:43:00:9d:6c:68:3a:60:cf:a2:f2:
c9:55:9f:90:74:97:30:0b:5a:8c:ff:38:38:bc:80:27:c4:cb:
b3:79:c7:4b:be:b5:30:8a:3e:1f:18:c2:ac:08:54:32:03:0b:
b6:a3:8b:82:95:64:50:be:a4:b0:a9:fa:74:1d:05:f3:82:08:
9c:75:10:8d:36:c8:9e:76:ef:ee:88:4c:e9:5a:e8:d5:e7:27:
7d:80:5d:77:f1:2f:2d:18:7a:34:34:04:54:f1:85:7e:a7:fe:
fc:60:4c:f0:b7:7e:ec:52:09:eb:9e:32:0b:09:2b:fa:8a:9c:
87:9f:01:1e:be:11:ee:bc:18:ea:b9:e8:42:b9:a5:17:7f:99:
f0:20:5e:73:37:19:02:d5:e9:c6:6d:45:ec:ad:0c:d0:f0:93:
bc:4b:ff:14:d2:61:a8:67:4a:31:1d:21:4f:39:2d:d7:60:0f:
d1:d4:85:61:e6:5b:39:d9:e4:f7:b8:76:84:a1:06:29:40:f0:
ed:93:eb:b8:23:13:07:8b:8e:83:62:32:11:67:45:a8:fa:b1:
ce:d3:63:a1:d7:50:e2:13:eb:ee:89:38:99:bf:f2:96:c4:97:
11:a1:87:55:17:c5:e9:4d:25:b2:59:cf:ee:29:54:d2:b1:db:
a7:f1:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:30 2025 by rpki-client