Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f35e66b4-5295-3cb9-8ea5-02e0558bb96a.roa
File: f35e66b4-5295-3cb9-8ea5-02e0558bb96a.roa (raw, json)
Hash identifier: uLY4UPO9VyeSeGIKHvRWJNVoSi5Rm+O0sS7xGolJ2ek=
Subject key identifier: 2B:F9:E4:C9:79:A9:DF:62:66:9C:38:20:AE:61:A5:DA:F6:31:B7:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B9FE93730567E97D896C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f35e66b4-5295-3cb9-8ea5-02e0558bb96a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.166.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:9f:e9:37:30:56:7e:97:d8:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d01eed89-62f7-4a25-9ce6-c576bf826378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:cf:09:7e:fa:6c:4a:1c:7d:ac:28:4f:b3:
2f:3d:9c:78:bf:10:09:d8:c4:23:1b:42:dd:14:88:
56:60:cc:9a:5e:a9:d9:24:e4:15:46:b7:ee:5c:39:
3d:51:b1:0b:85:e5:88:09:00:b8:b6:e2:b2:53:bc:
f0:46:98:18:43:c7:32:ff:3a:56:26:23:e9:79:94:
0f:06:13:31:19:4f:6a:4a:c4:22:e9:76:03:83:32:
3b:80:55:0b:27:d3:75:e4:56:6a:72:1c:14:6a:52:
76:5e:be:0f:a6:80:b2:e3:d7:04:8e:73:71:c1:f2:
29:ee:ca:e0:39:46:37:fb:17:9e:15:9c:34:dd:65:
56:c7:bc:d0:98:ca:03:a1:ed:d5:17:f8:00:65:4a:
27:f1:53:75:ee:45:83:c3:21:f7:5f:26:4f:35:16:
b4:a1:9a:24:69:a7:77:f7:5e:45:0b:eb:88:84:c8:
74:5d:eb:90:ba:5d:1f:5e:d4:46:d4:d0:2e:c9:c6:
1c:3b:e0:ea:84:5f:e4:87:ca:81:19:07:a3:e7:f3:
f9:6e:aa:7f:07:be:0b:c4:65:96:ae:a8:e3:e1:ee:
d1:8b:1f:eb:9a:68:78:ce:5f:2b:92:57:95:0c:9c:
0a:fe:d9:3a:16:d7:ff:72:df:20:d7:9f:cb:37:8e:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F9:E4:C9:79:A9:DF:62:66:9C:38:20:AE:61:A5:DA:F6:31:B7:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f35e66b4-5295-3cb9-8ea5-02e0558bb96a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.166.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:c7:d4:b4:0c:f5:87:c6:a2:1f:a7:dc:cb:40:15:d1:b6:86:
bc:24:53:af:22:a7:00:ce:1c:32:70:cc:0e:21:90:d4:fe:71:
a9:fd:ca:44:f7:a3:82:4d:49:92:25:2f:9c:ac:46:0c:e1:33:
4d:a8:76:0d:63:67:b2:b4:21:6b:f8:bb:25:de:75:d4:f6:27:
5a:bb:5a:4a:49:68:da:8c:b7:40:ee:fb:95:8e:60:03:7d:07:
6e:a9:13:16:a3:b0:49:27:9a:00:ea:6d:7c:0a:06:24:4a:bf:
42:fe:b4:6c:5f:f7:21:7d:39:f3:3c:85:b0:6e:6e:39:11:f3:
3f:38:c5:43:68:2c:9a:5f:ef:dc:19:e7:c9:aa:8c:c8:a6:81:
47:ef:b5:6b:3c:aa:27:98:86:32:b3:c0:48:3a:8d:17:5b:5e:
02:60:81:80:83:2f:ac:66:6a:8d:8c:e8:69:23:36:a1:4f:d6:
10:fb:20:00:fd:ef:fa:e0:05:c5:4d:3a:4e:5c:da:95:06:88:
8c:67:a0:46:37:6f:ee:92:e3:a3:4a:93:b3:a3:26:61:71:e4:
d4:1f:fb:f2:ce:4a:6e:93:39:d3:a5:73:37:6e:9d:08:20:67:
74:8f:5c:0b:c4:30:9c:33:74:44:64:f4:25:7d:1d:b6:7f:81:
c3:0c:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:15 2025 by rpki-client