Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdd5d17-80dc-30c8-8543-0ee1b1e1667c.roa
File: ffdd5d17-80dc-30c8-8543-0ee1b1e1667c.roa (raw, json)
Hash identifier: qXGKLXBJCV6FyqCi0cjwcmZRsdQ3UH1RJeLhBVC1iaI=
Subject key identifier: E6:51:93:63:1A:30:65:9B:4D:2A:2C:57:46:6C:97:88:B2:93:F1:24
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10437B11BC97BC58DC0080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdd5d17-80dc-30c8-8543-0ee1b1e1667c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 73.20.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:43:7b:11:bc:97:bc:58:dc:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6c51343a-ec03-4a63-bbce-b3ab1fb78898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:c4:ee:d6:5f:03:6e:ea:3b:3d:16:47:07:
79:58:fa:18:e2:9e:a3:6b:fc:6c:89:c6:c5:0b:d4:
2d:a7:0f:2f:61:18:dc:5a:92:3b:e4:1a:72:7f:7f:
46:78:2a:f4:27:52:ef:ff:18:c4:a8:71:c2:3b:c2:
3f:74:95:a8:03:d0:89:d8:c4:d0:99:b2:1f:1b:d7:
d1:73:e0:e4:67:8c:18:54:ac:a3:00:d4:3a:30:c9:
a5:3d:4e:f6:6c:ba:9e:61:fb:d8:a5:84:b0:d2:80:
59:05:b3:f2:98:d4:5c:ad:79:8d:c1:00:b4:0f:73:
aa:28:d4:82:9e:01:e4:6c:2d:f2:37:04:f8:72:7a:
a4:cd:67:0a:d8:d3:f4:0e:bd:72:eb:e6:19:53:49:
cc:4d:6d:30:c8:b4:40:72:2e:21:65:17:2b:89:49:
7f:7a:91:ff:d5:70:e8:71:03:b0:4c:70:fb:c2:28:
b3:cf:48:63:97:37:b2:ca:23:93:de:a7:7f:3e:2c:
6e:03:fb:b9:88:4b:26:aa:31:39:d8:31:95:01:bc:
ad:12:6b:b2:a3:07:e9:2b:f6:25:98:04:21:4a:f5:
27:84:6f:b4:06:31:eb:5b:66:95:08:b3:dd:45:a7:
5a:6d:77:c8:1e:3a:63:bc:7b:96:f8:eb:74:22:85:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:51:93:63:1A:30:65:9B:4D:2A:2C:57:46:6C:97:88:B2:93:F1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdd5d17-80dc-30c8-8543-0ee1b1e1667c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.20.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e8:2c:98:61:ee:3d:09:e1:ae:f7:90:0f:1a:c6:52:06:d9:
58:35:c6:cc:bb:1f:cd:61:f9:96:31:a0:69:3f:04:45:8e:8d:
12:8a:a0:7a:9b:5e:0c:0e:90:51:1d:45:83:43:2d:da:10:15:
4a:17:b2:5f:6c:f0:26:8f:fe:18:f9:98:a6:ef:bc:64:14:ae:
b8:c6:9a:59:ad:c2:16:62:2d:e0:57:8f:ac:cf:65:f5:5e:3e:
00:d0:35:5b:a9:e7:32:32:8f:a0:cf:f5:5e:06:89:e7:1e:3b:
4f:1a:ab:01:b1:7c:42:dd:81:b8:2f:3f:a4:f5:f2:b9:6e:7d:
cd:05:b3:bc:55:e9:c6:7a:ea:e3:a5:42:20:be:a5:ed:49:f5:
63:9f:99:c4:3e:1f:47:6b:5d:02:d5:0f:01:2b:31:47:50:30:
e1:34:b5:e9:ef:49:35:a7:7d:d6:1c:d6:2e:67:f2:f6:cf:ad:
32:d5:b6:9a:02:94:95:6b:a0:d3:5c:56:bf:b0:42:04:bc:96:
33:e1:d2:35:2d:98:7c:c7:31:f2:53:18:27:98:ba:e6:00:4e:
17:a9:11:ef:37:eb:3f:d8:9c:0b:43:d1:17:ea:65:08:e0:6f:
ff:c6:e0:3d:4f:de:3c:3c:18:df:46:97:52:af:8c:13:97:71:
01:66:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:42 2025 by rpki-client