Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36b4a913-745f-3f39-9478-77d6a3a37c28.roa
File: 36b4a913-745f-3f39-9478-77d6a3a37c28.roa (raw, json)
Hash identifier: SBahhlm6TK2dkSs17SHv8Fx7AgluEADpM/KbTUZSMgI=
Subject key identifier: 29:27:26:E4:61:04:3C:80:16:45:D0:D4:AB:B6:05:D0:CC:A6:F4:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF767F9C935D6E9ADF9C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36b4a913-745f-3f39-9478-77d6a3a37c28.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.22.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:76:7f:9c:93:5d:6e:9a:df:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d706538b-2f36-444e-b062-c0ea0fa05481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:84:de:59:89:11:71:b1:4a:3e:1a:47:89:
4b:e3:ea:80:a5:57:3e:85:68:0a:63:16:01:8a:8d:
d1:5b:90:21:6d:48:9a:ea:27:08:fd:3c:38:4d:ad:
59:64:22:c4:9c:95:b7:82:be:fa:ba:32:4e:17:dc:
5d:53:53:21:80:f6:89:87:fb:aa:64:ba:c8:f8:7a:
c8:8e:3f:28:64:85:e6:ec:6e:6b:58:c4:bd:57:cf:
d2:41:cf:e1:62:cc:73:60:0c:66:0e:e5:83:72:dd:
d4:50:09:65:1e:a1:ea:6b:1b:86:e7:c5:3d:b7:e0:
20:ee:82:72:b8:89:4e:8d:be:a1:7a:4f:04:47:c9:
dd:95:0c:f7:9a:1c:93:4e:ef:f1:7f:37:00:13:b0:
dc:42:b3:95:fa:44:5e:0f:17:d7:3f:3b:88:a1:4c:
b6:6d:b9:90:25:85:70:c1:32:e5:4f:15:33:3c:7b:
45:00:6b:ac:56:d6:57:b5:cb:9e:ca:09:17:65:1f:
a2:82:6b:3a:c4:42:14:87:ca:e9:ea:d2:30:d8:c3:
27:16:fb:21:28:c9:c4:7e:d6:c0:aa:94:9c:0e:56:
57:22:c7:7f:15:dc:25:58:2b:4b:28:59:97:bb:2d:
3e:42:62:8f:9a:41:c8:90:48:e9:4e:a3:6d:48:98:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:26:E4:61:04:3C:80:16:45:D0:D4:AB:B6:05:D0:CC:A6:F4:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36b4a913-745f-3f39-9478-77d6a3a37c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:47:02:2d:4e:e5:41:8c:3d:66:f3:3e:84:83:1a:04:fc:49:
23:56:5c:95:30:27:d8:a1:aa:20:0c:37:77:75:5b:e3:26:9b:
db:6e:65:1b:61:50:e0:8e:59:4c:f2:52:50:4e:77:a7:24:4e:
dd:1d:7a:d2:db:95:a7:a4:c2:50:5c:8c:a1:93:b1:6f:61:d7:
25:1e:28:c7:03:13:3f:e0:01:90:f3:fe:45:9e:96:47:c1:15:
8c:4b:c0:7e:29:01:8a:ad:a4:de:b6:86:78:0e:ba:53:97:1b:
33:e8:e6:5b:1f:21:cb:37:aa:6d:78:43:fa:53:6f:01:85:7c:
ed:e1:c8:0a:10:36:6a:1f:49:c4:2a:69:ca:3a:5a:49:be:ab:
d1:be:72:59:fd:46:9c:84:0e:1e:36:05:3a:bb:b5:b2:30:cf:
aa:51:cb:80:1b:3c:de:e8:68:f6:d8:08:5d:cf:2e:b3:36:d3:
b1:e8:02:a1:8e:e6:7f:b8:b3:e4:fe:96:76:4b:e6:1f:43:12:
a0:f4:a7:b0:3d:56:d7:91:fa:37:09:43:47:21:27:15:e0:c7:
86:b4:19:cf:c7:01:09:be:a7:7c:69:dd:4d:d4:86:42:19:45:
dd:66:7f:b8:2f:4e:03:c9:88:03:2c:bf:a3:2d:6d:ad:21:07:
cd:fc:7c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:41 2025 by rpki-client