Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19d4cdda-ef95-3763-b5d5-93f8baedf7d6.roa
File: 19d4cdda-ef95-3763-b5d5-93f8baedf7d6.roa (raw, json)
Hash identifier: cOTg3N8X6dVlESWvNObzCzAGGIfo1sgiz05JNr9mgkQ=
Subject key identifier: 64:C3:33:72:29:39:42:FF:01:72:E5:6F:E3:53:0B:64:C9:1E:E3:2B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CF913692CC96AD7BB39E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19d4cdda-ef95-3763-b5d5-93f8baedf7d6.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.108.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:f9:13:69:2c:c9:6a:d7:bb:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3e590c8e-ece0-4572-901c-260cb81b5480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:97:55:6f:47:6c:0f:b1:6b:15:0c:6c:0c:
eb:6d:32:dd:27:0b:5e:92:c6:60:36:7d:96:52:ef:
48:19:76:4b:2c:c6:41:e6:e3:34:f2:16:99:b4:c2:
f5:3c:8b:91:c0:a0:73:02:49:ac:21:54:81:4a:e8:
26:4a:28:11:39:cb:27:97:0d:72:7c:3f:b4:92:b4:
61:60:68:a6:02:14:d5:20:8d:db:38:3b:19:69:bb:
1d:ba:3f:32:44:80:ca:95:8a:a9:84:a6:c7:dc:57:
1d:b3:b5:42:82:4e:c8:2b:44:93:d8:a3:2c:94:32:
e9:3f:cd:30:8f:ec:a7:ab:48:da:92:e0:e9:2b:2a:
7d:9a:d7:08:9a:ed:17:2a:52:75:70:a1:f2:d3:29:
01:f3:20:05:1e:ca:54:26:52:90:4a:e6:87:86:95:
94:33:91:6a:c0:88:3c:b5:10:41:73:22:5c:e3:75:
94:3b:ff:3c:72:18:d9:6a:07:51:63:ac:4c:a1:4b:
26:0a:d0:48:da:67:c9:c1:61:df:75:2c:17:1c:43:
ee:df:24:e2:91:c4:71:84:a4:86:1f:33:24:60:1c:
e1:32:59:3f:2c:45:5d:59:ab:07:05:2f:98:8e:63:
24:75:f2:2a:fa:de:c7:e9:bf:88:75:8c:18:15:5e:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:33:72:29:39:42:FF:01:72:E5:6F:E3:53:0B:64:C9:1E:E3:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19d4cdda-ef95-3763-b5d5-93f8baedf7d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.108.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:24:59:96:d2:fc:db:1e:76:bf:cb:0a:d4:51:e5:8d:6e:35:
2c:95:dc:43:3c:6e:a0:56:a5:b2:ba:ad:86:3c:78:f3:73:af:
7a:66:ca:df:26:83:3c:ad:a2:10:77:f3:df:6f:01:8b:68:32:
87:c5:39:09:42:bf:da:cf:d1:4b:7c:85:59:93:13:eb:75:83:
9b:cf:7e:c4:b7:9e:f9:70:f8:9c:c6:26:3a:f3:a8:a6:01:c2:
b4:38:8a:56:a9:3e:92:80:cd:f9:03:6a:3e:e1:f2:13:90:4f:
fd:96:64:1c:ac:cd:6c:f3:72:8a:56:cb:fd:71:0f:da:6b:ad:
c8:f4:a0:43:41:fa:d5:82:b3:26:e5:e0:98:ff:70:85:d2:b4:
27:06:13:c3:0f:fa:0d:5b:21:77:27:ea:fb:2a:c8:6e:df:71:
ab:ad:a8:a7:d7:8b:c4:7f:e0:cf:a3:ac:f2:b4:a7:8c:1b:2c:
c9:ce:dc:46:96:25:a9:ae:c0:0e:99:47:f1:9b:c2:5e:83:f8:
f0:ea:72:21:78:f3:ba:f2:dd:f8:35:82:8c:21:6f:4f:e8:73:
3b:78:26:a5:02:5b:f0:b8:a1:96:41:f8:dd:aa:9b:4d:d6:bc:
c2:ef:23:b4:aa:ef:4f:ac:25:1d:d9:2a:d2:03:aa:a7:75:dc:
03:ee:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:01:49 2025 by rpki-client