Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2300b4c9-88d0-3842-b3a2-bd3fe86196ba.roa
File: 2300b4c9-88d0-3842-b3a2-bd3fe86196ba.roa (raw, json)
Hash identifier: D5qQsIxoaOaw3Z2RlHHTpZKBOkJFRbLYRdYoX823fEw=
Subject key identifier: 5F:D7:8F:F0:C7:BF:40:28:81:DE:13:4D:71:47:89:3A:50:5A:3B:4F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF680F03AA6D2F7BA68680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2300b4c9-88d0-3842-b3a2-bd3fe86196ba.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.168.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:68:0f:03:aa:6d:2f:7b:a6:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=714f391d-f1c9-4f68-8b67-ae5e8abd3415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:68:fa:ed:3b:01:15:4e:9e:d9:e3:eb:f7:
a1:eb:3b:2d:c0:dc:03:8b:f0:e4:16:c6:c1:b6:26:
11:83:5b:16:13:a8:40:2d:9c:bc:d6:ee:c9:19:5f:
a8:53:b8:a1:b2:c6:04:a8:11:4f:e7:a9:72:10:dd:
6e:39:1b:b8:f9:bc:dc:4f:34:dd:89:4a:27:ec:69:
3f:c6:d3:3b:f9:c0:14:3a:2b:95:3e:6c:6a:29:f0:
f6:89:38:af:ad:56:c1:aa:53:8c:ce:48:be:20:c5:
00:00:ee:67:5f:1c:dc:8f:bb:bf:65:0a:b2:67:55:
0d:2e:1b:c8:89:d4:29:19:c0:fb:4e:16:c0:94:df:
56:1c:01:1c:26:9d:14:7b:57:e2:bf:d6:3a:cc:6f:
f5:eb:02:09:19:3c:dd:f2:cb:05:58:13:e7:cf:a5:
cc:58:48:fa:90:9c:5d:7c:8b:ea:5d:2f:20:4a:ac:
da:6e:55:c0:0b:81:98:d6:ca:71:df:cb:d2:d0:6d:
4c:22:f0:28:4b:50:f3:4d:dc:47:34:b1:43:31:3c:
6c:8e:2c:8a:57:48:6e:c9:c5:59:86:8c:21:f0:f8:
34:db:1d:89:32:94:96:1f:43:c0:1d:04:74:90:b9:
95:0d:6f:01:df:1a:9b:c8:93:fe:8b:8e:fe:fc:88:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:8F:F0:C7:BF:40:28:81:DE:13:4D:71:47:89:3A:50:5A:3B:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2300b4c9-88d0-3842-b3a2-bd3fe86196ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.168.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:d9:03:7d:40:d7:c0:ca:0b:d7:ef:a5:d5:0d:31:6b:0f:79:
30:38:5f:08:38:12:3e:f7:bf:7b:b6:f5:e4:19:5a:93:fb:6b:
f9:7e:a3:d5:85:83:f2:80:94:9d:74:b5:3a:0a:b0:f8:47:c8:
40:b9:17:1b:1a:2f:73:4b:63:34:d6:21:d5:63:7d:31:4c:93:
8f:9c:b5:9a:2a:cc:f3:b4:1e:50:7e:4f:04:2e:f0:8d:01:2d:
11:55:1d:0d:fa:49:04:ae:18:23:9a:2f:ab:f9:4c:fa:35:c9:
5a:15:66:30:ba:b8:5f:f6:35:0a:a6:5b:ca:f1:14:50:93:de:
82:14:35:93:af:c0:60:59:27:18:90:43:a7:f2:18:ed:80:02:
e1:a2:67:51:6e:b8:fb:f0:08:28:40:8f:0a:83:c3:5d:be:3a:
74:8e:28:b7:b0:4b:69:c2:2a:29:ed:5b:84:6c:8c:7d:0c:a7:
6c:b8:31:26:5a:3b:21:02:08:66:e8:20:81:32:26:24:79:e5:
94:54:90:0c:6f:c4:eb:b9:c7:0f:86:5f:3f:e9:d7:4f:d4:40:
03:b8:b6:a3:84:a5:f6:49:b6:4e:5f:2c:44:4e:94:e4:28:be:
21:f9:d6:49:d3:11:e7:d4:71:91:9c:76:c1:84:c9:bd:3f:bb:
a2:a3:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:42 2025 by rpki-client