Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2186b1f1-925f-3cc0-9060-5ce32ec7795a.roa
File: 2186b1f1-925f-3cc0-9060-5ce32ec7795a.roa (raw, json)
Hash identifier: I6wjmLVRSTBOXmk++GaZh+dhaZgHxDpdJYJSalcb3WM=
Subject key identifier: 07:36:B2:7D:D2:3E:F5:C4:C3:43:B9:99:C5:E1:54:D7:8C:DF:CB:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CCF256D4278D1A20CEDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2186b1f1-925f-3cc0-9060-5ce32ec7795a.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 33659
IP address blocks: 73.199.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:cf:25:6d:42:78:d1:a2:0c:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=954c23d9-70e7-492e-9664-0fa12a754a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:12:85:25:4f:f1:65:2f:09:65:4e:92:db:
a9:23:37:8a:18:96:e7:11:a6:c5:27:62:82:4b:b5:
da:c3:03:0b:b1:89:d4:37:9c:ee:bf:3f:ea:ea:5b:
27:a2:68:c9:55:58:46:b5:1f:9a:6d:1c:1c:6a:61:
7f:57:bf:3f:de:bf:14:87:58:f9:09:e9:f1:f1:b4:
86:e3:72:80:63:ac:fe:0d:e3:79:bf:c5:50:84:32:
89:5b:72:a3:f5:cd:cc:b1:e1:b6:23:a8:6f:4b:85:
9b:8b:ac:45:8f:cc:04:12:9c:90:ea:df:b7:f8:6b:
52:d0:f6:58:ac:a3:53:a8:0b:1c:32:7c:78:c9:98:
6d:f9:a3:be:d1:bc:95:49:0a:10:82:f6:b5:39:35:
fa:8e:94:6c:4c:e0:25:96:18:e3:78:ca:96:46:44:
4d:fa:7b:4f:9a:dd:54:a1:27:f1:43:b0:58:66:52:
4b:a8:4c:6f:b0:bd:fa:38:2e:b5:56:55:c9:57:59:
76:94:55:c6:74:48:3a:08:57:4e:80:de:9b:c1:62:
b5:fc:3b:9d:99:5f:fc:e8:f4:89:6f:fd:f4:88:ac:
a6:f6:5b:af:a9:c2:66:c9:14:b1:79:8f:59:dc:be:
52:a5:e9:55:74:38:32:8e:62:fe:82:de:f0:23:89:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:B2:7D:D2:3E:F5:C4:C3:43:B9:99:C5:E1:54:D7:8C:DF:CB:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2186b1f1-925f-3cc0-9060-5ce32ec7795a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:67:f0:6e:f1:e8:09:c9:da:9c:46:17:d7:c6:5c:4e:6e:c3:
20:4b:0c:b2:a3:d3:89:ce:83:7e:9b:59:ce:ce:68:c4:cc:c6:
d0:e5:c7:33:bb:76:a4:f5:cf:60:16:23:d4:c5:51:4d:1a:23:
64:42:18:4c:8c:5e:04:de:84:e0:03:5c:53:06:ed:f2:b2:3e:
70:3a:11:97:54:13:44:52:5a:09:b4:34:06:0f:06:08:54:a8:
db:3f:19:a8:2c:7f:c2:d5:70:da:ad:fc:d3:d6:c5:db:ef:8e:
37:8e:46:75:c8:7f:58:48:70:cc:77:13:e1:b3:20:78:ad:07:
13:8d:24:1d:21:33:27:95:22:39:b3:b8:f4:f2:ff:d3:0b:8d:
cf:c8:1d:52:7c:17:03:96:af:40:be:e7:84:71:ab:37:93:eb:
34:72:41:93:33:5d:8a:aa:c9:66:14:e8:c5:76:80:2f:86:c7:
10:29:a2:2f:83:06:a8:83:c2:26:08:6a:50:bb:38:57:ee:62:
0a:f1:4b:bc:9e:96:f5:7b:6c:e4:21:92:b6:10:06:b7:56:83:
84:82:f9:43:30:7c:60:21:68:a6:0f:b9:a6:91:d2:c1:a7:40:
bc:87:58:fd:a5:d5:3b:c6:55:8e:b6:25:ad:9e:4a:af:5d:3f:
c0:be:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:28 2025 by rpki-client