Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e54c0a35-d2ef-3bc0-b70e-d5f6b8ccc85b.roa
File: e54c0a35-d2ef-3bc0-b70e-d5f6b8ccc85b.roa (raw, json)
Hash identifier: ZuDZiFcwvkhDnOhQMg9TmzGLrt8C+o8Uj9P2HKhNzB0=
Subject key identifier: B2:DB:D0:DA:CC:96:90:5D:06:D9:E6:41:71:7F:CE:5B:94:54:5A:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1043562C52E5AA9648E2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e54c0a35-d2ef-3bc0-b70e-d5f6b8ccc85b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 73.20.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:43:56:2c:52:e5:aa:96:48:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d128d461-1adf-4fdc-b458-f16f42c45042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:97:53:7b:60:7b:3f:f1:ae:19:73:45:cd:
0b:54:d9:a7:e4:0b:50:93:c5:ad:93:25:89:4b:ca:
ad:7a:1c:f7:72:dd:e4:41:eb:7a:f3:54:ec:08:ab:
6b:99:5a:3b:c7:54:b4:05:ca:30:a3:45:71:2b:dd:
be:f1:23:a6:56:f1:ab:d4:f3:0b:24:cb:e4:6d:45:
78:1f:16:4a:67:c5:2d:9e:17:3b:a0:c2:c6:c1:1f:
7a:ff:4e:2e:f3:1f:f7:1e:cc:ad:dc:99:a2:09:c9:
19:9d:af:d4:b3:ba:30:ef:82:8e:52:ee:9e:90:70:
a5:4f:03:d9:23:63:ee:c2:f7:68:21:54:52:b0:01:
0a:bf:9a:2b:1a:30:c2:58:14:db:7b:62:42:49:e4:
7c:84:fa:21:e8:9f:7c:0b:be:c1:9b:61:61:2d:36:
ac:38:55:d4:86:e6:8c:0c:4a:57:cc:a8:02:04:cc:
43:30:96:43:5a:5b:aa:09:99:25:b0:dc:77:1b:e4:
15:5e:61:87:91:c4:41:3a:5a:3e:ab:6c:38:81:df:
7f:45:96:a3:71:ce:aa:f4:ca:04:42:28:05:43:c5:
a6:37:db:cd:73:cd:17:8c:56:b1:37:6b:a4:f2:d7:
80:a2:dd:65:2a:12:18:6e:ac:30:38:3d:b8:66:85:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:D0:DA:CC:96:90:5D:06:D9:E6:41:71:7F:CE:5B:94:54:5A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e54c0a35-d2ef-3bc0-b70e-d5f6b8ccc85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.20.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:1f:1d:d8:cc:f7:90:57:71:63:46:63:44:d0:35:5f:15:20:
2a:1f:f6:dd:89:7c:15:42:0b:1d:e6:3f:1c:bf:35:d4:eb:86:
06:3b:38:96:87:f8:f7:b7:bc:ed:cb:54:10:cd:57:21:0c:58:
73:9f:f7:5d:8e:86:e0:e7:4d:68:4f:54:67:6f:16:f6:37:47:
08:4a:3e:63:6c:e5:56:4f:6b:73:c7:06:4f:72:ec:ea:ba:39:
6c:31:f2:67:38:84:ea:db:7c:40:9c:a0:54:67:8a:2a:c2:95:
d7:98:60:62:0d:1b:ca:f1:f7:20:a0:3d:35:34:dd:92:6d:5b:
71:05:a0:d0:87:c3:fd:e8:73:98:f1:c0:22:ee:37:60:25:17:
05:95:f6:a2:c0:eb:13:04:ff:8b:dd:1c:ac:7d:fa:42:fb:8d:
48:68:cb:e8:e3:7a:37:ca:ff:23:a4:5a:29:cf:68:14:bb:88:
6b:e8:ce:41:cf:bb:29:66:98:c9:a3:2a:d9:af:85:86:73:8a:
78:41:67:8f:05:66:11:06:c3:60:6d:76:a6:1f:bf:f0:b6:51:
89:17:36:e1:2c:07:f4:76:e3:fb:29:73:44:c1:dd:1e:54:2b:
f8:a4:68:42:55:19:35:1d:57:96:51:97:06:59:9c:45:2c:2f:
72:99:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:31 2025 by rpki-client