Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f00d47d8-c71b-3073-aeae-6518d6d70237.roa
File: f00d47d8-c71b-3073-aeae-6518d6d70237.roa (raw, json)
Hash identifier: crQOr0MwWbr7V5zILaqDktbyjakjwTSB3ek92j1ToLs=
Subject key identifier: 38:80:08:3F:03:7E:7E:E5:0E:2E:44:5F:2C:34:E4:6B:1D:9D:10:68
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13C383B9DB6084B6FCD880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f00d47d8-c71b-3073-aeae-6518d6d70237.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.158.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:c3:83:b9:db:60:84:b6:fc:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1a7c677f-5a7b-4ab0-9ea0-2eef7991616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:ec:90:a8:a3:06:79:cf:b6:cb:48:6a:82:
c0:9c:ec:d0:b1:d6:cc:cf:f1:6f:c1:02:75:df:f1:
d2:48:b9:01:97:78:24:66:b5:9d:c7:e5:6f:a1:39:
84:91:0e:56:83:92:8c:ff:e9:3a:64:27:93:2c:8a:
32:9e:a3:1c:b0:6a:c5:85:ce:78:02:1d:a4:68:35:
3b:27:b2:21:d0:58:70:28:8b:58:46:47:9a:0a:d4:
37:cf:70:cd:27:e0:a3:f7:e0:45:64:06:fb:fc:77:
5e:ed:01:7a:48:4e:26:50:0b:73:9f:a8:88:47:fd:
7a:6d:b6:82:af:ba:57:fe:75:12:8f:d9:54:0a:98:
04:67:9f:ca:6a:1b:c2:c6:0a:0d:07:92:b4:0b:d9:
ad:c9:46:2f:79:7a:0b:28:d8:bb:33:86:65:8a:37:
4c:bc:39:82:8c:ec:46:0b:bd:1e:40:14:fe:91:c1:
28:cf:30:15:32:12:c7:06:93:26:ec:2c:96:dd:73:
29:08:ac:d7:ad:19:fd:0b:77:ab:2e:b1:d0:0f:10:
c2:9e:8d:40:ba:a8:cc:d2:93:db:4f:e0:1b:68:96:
c2:5c:4f:3b:16:d9:29:23:98:ca:0e:f3:45:89:dc:
04:4e:4f:d0:45:0e:40:0a:e4:3b:90:67:87:bc:03:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:08:3F:03:7E:7E:E5:0E:2E:44:5F:2C:34:E4:6B:1D:9D:10:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f00d47d8-c71b-3073-aeae-6518d6d70237.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:95:74:ef:c3:6c:e0:5a:89:c5:c2:5f:66:fa:30:6f:00:70:
07:05:35:8c:d7:7a:9a:d8:e8:ec:c7:ec:0f:a4:8d:1d:67:8a:
db:c1:ef:a6:17:24:53:8d:63:df:43:cf:5a:e4:0b:9e:96:9d:
44:36:6d:82:43:4b:88:5b:b4:27:c6:33:76:86:ed:c4:cb:c2:
d5:a4:67:a1:c9:03:19:e7:e2:0d:72:ac:33:72:b1:49:42:af:
c1:6e:58:e2:df:21:b9:70:a8:ac:a1:1e:dc:66:47:d4:d7:40:
c0:fe:1b:67:4e:46:fd:62:c2:c5:b0:89:e6:ef:43:40:13:9a:
39:39:fc:20:8a:63:95:f6:45:c0:80:95:a8:a2:52:a0:92:4a:
5a:df:8c:14:c5:3d:99:1d:70:3f:6b:61:00:b1:c0:c0:f4:fe:
86:8a:5b:39:41:c9:32:08:c4:ab:11:aa:b0:8a:56:b9:2b:76:
0c:c0:9d:e1:ab:cc:90:17:0d:d5:7a:95:2b:b8:aa:fa:ab:4d:
d1:4b:85:1a:37:cf:3f:f0:f8:e1:c2:08:16:f2:60:ab:a6:51:
e4:9d:35:38:f6:c1:b4:49:1a:91:1e:3e:e8:84:60:31:bf:74:
a0:0a:ed:06:f8:17:41:b4:37:77:7f:32:c2:a5:00:ae:2a:6f:
c2:8e:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:15 2025 by rpki-client