Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f54079a1-9b2e-3b3b-8db5-840b22d9ba6e.roa
File: f54079a1-9b2e-3b3b-8db5-840b22d9ba6e.roa (raw, json)
Hash identifier: Rx023a/VfWmDijiziInHkyMRi1xIZKzy1W6zdidM9RQ=
Subject key identifier: FC:53:9C:61:D8:AD:3B:1C:EE:FE:34:6C:D0:A8:A1:03:C6:19:78:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1432BC7D246F5618F18040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f54079a1-9b2e-3b3b-8db5-840b22d9ba6e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.223.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:32:bc:7d:24:6f:56:18:f1:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b005953a-1e9a-4912-aee2-e1a7b613c46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:86:00:1f:8d:7b:d9:70:3a:6b:61:a1:4d:
7f:e9:99:d1:2b:09:23:24:01:47:8e:31:99:50:a9:
dc:e9:44:26:da:ae:a2:1e:71:c5:6d:f9:b5:a0:4e:
b0:92:9d:f7:5c:89:65:3b:29:81:52:9d:c6:90:7b:
5b:33:f0:8f:fb:c7:a7:a6:5e:87:04:77:e6:3a:72:
e4:d8:a4:26:8a:9d:e0:3d:24:84:12:97:99:61:c0:
e9:62:33:23:65:19:ee:ec:30:3b:30:bd:c5:d3:a5:
cc:14:77:19:b1:9c:98:48:c1:7a:af:ce:ad:df:0d:
3a:45:a8:3e:f3:6e:88:a0:30:7a:98:75:7c:aa:e0:
7a:e1:7b:a5:41:02:12:48:35:8f:10:01:01:c5:ba:
87:fd:23:d8:d3:ff:db:c0:48:52:58:24:9d:cd:b1:
6b:7e:b8:e2:49:37:0d:bb:da:55:12:aa:78:fe:b0:
be:aa:15:40:94:70:03:e7:54:a4:5a:aa:37:fe:76:
a3:a5:8b:ed:fc:3b:80:87:04:8d:ee:54:1d:c7:3a:
cf:74:62:6d:7b:f7:7d:20:11:26:39:be:68:d0:e0:
9a:a0:8a:ff:f0:ee:ae:b4:06:c8:44:47:fd:76:6e:
69:f9:09:1f:c6:ed:85:76:76:ee:da:1e:61:2d:e9:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:9C:61:D8:AD:3B:1C:EE:FE:34:6C:D0:A8:A1:03:C6:19:78:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f54079a1-9b2e-3b3b-8db5-840b22d9ba6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:16:d7:dc:02:83:af:f2:92:05:13:5d:4a:ea:89:39:a8:ff:
3d:e6:ac:a8:8e:a4:2a:00:ee:2a:39:46:92:8e:42:62:f1:8d:
51:5e:6a:fa:e3:42:90:ba:6d:80:d4:45:d4:b9:8d:df:a6:23:
e4:48:40:ae:99:a3:75:4a:b9:37:63:0d:29:96:e9:27:ed:80:
04:b7:6f:86:fd:90:22:37:e8:12:66:dc:c5:7d:02:c7:26:6b:
23:41:5d:4c:25:bf:c6:2c:0f:63:f9:34:ac:9c:0e:e9:79:8d:
8e:f3:1d:97:1e:a9:9b:13:f0:d1:b6:87:09:99:6a:7d:fd:be:
58:34:6e:90:7f:39:dc:e2:25:02:71:d6:86:d0:7c:30:e1:a8:
57:11:f6:1e:42:c7:26:3a:0b:1a:cc:1d:32:e0:dd:41:52:ec:
41:48:01:35:6f:fe:97:ee:44:10:05:cd:cb:01:b4:08:30:33:
e8:34:0f:ab:1b:0d:aa:6d:2d:d7:bb:80:9f:8f:b7:60:27:99:
2f:d8:af:c7:69:82:a8:0d:f7:59:26:55:ca:e6:5d:2e:17:6a:
7f:d4:1f:56:9f:ca:f9:7b:15:94:12:ec:8a:f1:47:8d:59:79:
6e:f5:92:b5:11:72:f1:94:ae:65:e3:99:65:b9:a1:d2:d3:bd:
75:c9:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:23 2025 by rpki-client