Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a464dd8-b482-3bdf-9aec-db65fd6573cb.roa
File: 0a464dd8-b482-3bdf-9aec-db65fd6573cb.roa (raw, json)
Hash identifier: u37JKDsnwif6PmoWRACNmrwIChKs9sbku1FlH0IgUvc=
Subject key identifier: 5A:57:5E:86:05:E8:3D:FC:0E:2B:33:8F:0E:AA:98:77:B2:5F:31:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF77DBA4B86FAE37354180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a464dd8-b482-3bdf-9aec-db65fd6573cb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.22.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:77:db:a4:b8:6f:ae:37:35:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3db38769-0ba3-4b7e-8587-935e3a22abfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1b:f6:4d:0d:62:aa:76:97:e7:51:75:2a:1a:
44:82:50:77:9d:a4:51:0a:68:27:e8:31:9c:6c:21:
ff:55:58:3e:b7:1d:45:dc:b7:f2:20:aa:5e:54:5f:
35:c4:b8:93:d3:c9:f0:c7:9a:9d:1f:22:5e:f0:46:
85:be:ab:e1:da:df:04:44:9d:7f:8c:f6:83:07:69:
2d:e3:4b:e4:8c:57:d0:63:42:12:8c:cb:14:b9:de:
41:de:e8:0e:91:e4:e5:01:fc:06:b0:ed:25:9a:20:
1c:71:01:33:03:f7:3e:d4:7b:db:0e:02:ec:67:98:
e9:e3:57:35:bb:a7:23:e8:a4:29:ba:55:9b:e8:96:
b2:4d:b6:cb:16:ed:4f:17:6d:4a:0d:38:b2:37:da:
bc:92:38:2f:32:da:30:ec:77:e4:d2:c9:fd:7c:50:
56:6c:a7:6c:f6:91:0a:f0:ff:9f:de:37:a0:36:c5:
25:ac:51:4e:7a:8b:54:42:8e:1d:76:19:01:67:30:
4d:9a:17:72:4f:98:d7:70:56:58:17:cf:31:a6:16:
4e:e7:5e:79:27:af:25:64:a0:70:77:db:dc:72:79:
5d:91:c9:49:d4:88:c0:00:76:f3:6b:3f:94:af:c1:
f8:23:4b:d3:73:9c:5c:9f:25:6b:10:e1:35:7b:c1:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:5E:86:05:E8:3D:FC:0E:2B:33:8F:0E:AA:98:77:B2:5F:31:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a464dd8-b482-3bdf-9aec-db65fd6573cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:95:1e:26:c8:53:9d:29:0e:e1:0c:0a:b6:2f:b0:67:0b:3c:
ee:25:9f:7f:1e:d1:1a:29:bc:a8:90:58:8c:23:03:79:d0:f0:
17:bd:33:aa:31:1f:da:ff:7a:02:41:06:d6:4f:14:95:3d:93:
67:b0:ed:e2:0d:df:00:34:48:60:0e:fc:a4:33:bd:9e:d9:5b:
67:16:64:b4:a0:bb:4d:c3:ff:8c:59:82:f5:35:f1:e3:3a:1c:
66:67:66:59:bb:a7:f3:e7:58:e4:80:89:90:a8:21:b2:55:a5:
56:aa:4f:39:15:e0:d1:a3:70:8f:08:75:63:15:02:4a:1d:49:
ac:ec:e5:29:ed:ac:ea:d4:0f:5d:be:61:96:65:90:74:18:e2:
43:b4:3f:15:b5:01:88:63:8e:ed:7e:4f:86:fc:34:d1:45:1b:
e8:20:74:d0:14:5c:8a:3c:51:c1:b1:4d:b6:42:7e:a0:69:b7:
a1:55:3f:e9:c7:bd:ae:3b:5d:79:11:97:b4:20:bc:7c:90:fc:
b1:87:05:7b:3d:c6:a2:5a:84:38:b7:45:4a:1f:fa:be:70:a2:
80:1a:6a:76:85:13:f0:d4:da:45:28:89:cc:1a:db:69:b7:c6:
ad:09:01:7d:7c:c4:69:3f:88:4d:96:49:eb:72:32:e9:e3:3a:
e0:fb:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:10 2025 by rpki-client