Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8dfadf8-2f34-3d7e-920f-77ba4ac6f570.roa
File: e8dfadf8-2f34-3d7e-920f-77ba4ac6f570.roa (raw, json)
Hash identifier: 8kdb8C4F/XHl7tbOPBMt6kbvlLoBJ5lyb9rS5HYhv6E=
Subject key identifier: DF:10:A2:73:3D:3F:E3:C4:50:40:FD:E2:54:34:36:EF:21:AA:E8:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11A9694F62773F5CC39340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8dfadf8-2f34-3d7e-920f-77ba4ac6f570.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.71.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:a9:69:4f:62:77:3f:5c:c3:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=519ff456-b5e5-4504-ad07-8bb4fccc2051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:67:ed:a1:ab:8c:57:13:12:10:d1:ca:09:
17:98:ac:81:87:dc:f9:cd:db:77:f5:b3:71:17:37:
91:d3:a0:52:14:df:06:e0:77:cc:e7:af:54:64:ee:
e6:19:df:32:05:93:69:2e:37:7c:8f:ac:d8:63:e3:
75:1d:2b:f6:92:70:f1:4e:be:e8:ef:ce:eb:77:41:
d0:13:b4:72:29:1b:95:08:ec:6a:c1:39:10:82:95:
35:e2:ee:ad:82:41:07:35:9b:ca:22:45:64:38:75:
6a:92:75:c7:b9:c0:6c:9e:31:87:40:2d:a2:cc:da:
aa:22:a3:80:42:f6:0a:d8:b8:6d:e3:4d:3e:39:15:
d2:79:4b:c9:dd:9d:57:10:12:24:bb:82:aa:9b:ed:
32:d5:38:80:ae:d7:09:50:f3:3b:f4:0b:9c:b0:fc:
8c:b3:df:3a:8f:59:b3:c8:b2:05:32:b9:4f:62:ef:
c7:b6:7a:34:bb:a7:4b:44:fb:6a:0e:39:57:23:c2:
6e:fa:15:73:29:c5:d3:57:e6:be:24:de:07:d7:b2:
aa:c8:2c:fd:5d:67:58:a1:b5:75:04:c7:b9:50:45:
22:4c:81:ed:3c:7f:9f:7b:77:99:32:8a:63:2c:19:
31:13:9f:f9:b0:bf:2a:52:77:10:92:4f:49:c3:b0:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:A2:73:3D:3F:E3:C4:50:40:FD:E2:54:34:36:EF:21:AA:E8:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8dfadf8-2f34-3d7e-920f-77ba4ac6f570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.71.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:ad:ab:44:2d:ec:2e:ea:92:9a:79:b7:a5:c4:eb:d7:fe:92:
82:ce:7b:fa:e8:4c:72:c7:d3:81:ea:db:fa:fc:18:e6:a2:72:
76:d3:11:a6:e3:1f:86:e4:39:3c:b0:03:42:86:49:89:47:3d:
fa:29:2f:f1:58:f8:23:86:1c:91:de:92:9c:1e:95:32:0c:2c:
38:fc:1e:ba:e0:17:fb:6d:7d:7f:6e:6a:e2:71:01:db:b4:67:
c8:7e:db:e0:e4:11:5f:ff:5c:40:77:87:dc:50:7c:fa:23:34:
1b:49:c1:48:80:97:60:aa:55:e0:49:f3:ce:e9:57:13:63:14:
59:ee:e7:eb:28:60:a7:6f:d8:e7:3c:a1:c1:10:29:f7:a6:78:
2c:13:15:5e:d3:6f:67:ec:41:55:80:65:ce:05:2e:66:df:76:
bd:21:10:6c:63:e9:de:3f:56:6e:7e:8a:8b:f9:45:8c:00:27:
49:8a:0b:fc:b5:42:8b:f2:38:4d:20:bb:96:b3:9b:5e:04:e3:
38:e6:40:01:e0:a9:57:b3:c2:55:14:5e:9d:b0:4d:52:e5:06:
ea:98:35:ea:cb:cc:71:8c:09:1b:07:b8:2f:f2:a9:0d:5e:2b:
e3:d9:2e:8d:b2:26:7f:4c:d6:f3:13:c2:21:9e:0e:52:76:df:
ef:c6:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:54 2025 by rpki-client