Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7aa2b0-298b-3f0d-ba74-ecf470b39609.roa
File: 3b7aa2b0-298b-3f0d-ba74-ecf470b39609.roa (raw, json)
Hash identifier: Rq+bsgC+gttUdQoHkS8QpElal+SNvbfEscAu1QfML4c=
Subject key identifier: DA:7B:C0:2B:E3:6C:D2:2B:47:6D:C7:F3:42:03:72:63:A2:1A:DE:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB098C8730EB47465F63480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7aa2b0-298b-3f0d-ba74-ecf470b39609.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 73.13.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:98:c8:73:0e:b4:74:65:f6:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=47ccd9f4-a6b2-472a-a348-0b6623afaf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:35:4a:b9:6d:bd:08:bb:13:e2:7a:40:02:
51:f1:3d:a0:2d:50:a9:ce:69:ba:76:21:a1:e0:39:
ff:c4:49:87:84:49:78:dc:4e:47:ff:36:e4:a1:2c:
79:3f:a7:15:14:bd:b9:74:3b:f6:a2:94:5c:d2:73:
b7:ba:53:ea:be:ff:95:a9:37:c0:3a:5a:60:58:b6:
75:07:81:e4:ea:81:c6:d7:99:fc:83:62:a1:d5:fb:
6d:36:a7:f0:f5:c4:57:de:c9:58:17:f7:a5:7c:63:
71:3f:12:17:76:68:57:39:fc:42:30:e5:fe:81:da:
a3:bc:f3:f8:da:d1:b2:cc:d3:7e:c3:22:ed:9c:6e:
49:52:35:02:f4:0f:7e:e6:18:f7:0f:70:eb:23:08:
72:7b:c7:eb:72:7d:f0:ca:87:f5:45:1c:79:d1:b1:
cd:de:b5:cc:28:ae:1f:f3:8d:3d:3d:3f:8d:89:3f:
ca:4f:99:92:79:d4:4b:fe:93:6f:cc:8c:5b:75:77:
20:a6:b2:95:79:82:f2:80:ac:ea:9d:47:3a:49:aa:
52:2f:07:d2:bb:b6:77:8f:61:ec:39:e8:47:85:09:
67:56:62:fc:e1:1f:40:4c:af:55:24:cb:e1:ff:51:
37:e8:92:e7:23:ad:be:d2:a6:72:d3:7c:49:68:44:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:C0:2B:E3:6C:D2:2B:47:6D:C7:F3:42:03:72:63:A2:1A:DE:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b7aa2b0-298b-3f0d-ba74-ecf470b39609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.13.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:65:22:83:e7:f1:ea:ef:07:2d:05:7f:c4:10:db:1b:96:a4:
17:06:7d:54:c8:dc:6b:c5:0d:4d:5d:b5:3d:fd:07:69:09:27:
60:ac:45:43:af:d3:2b:4e:1e:a7:07:6f:9b:5d:89:12:9c:8c:
b1:e4:ca:b1:cf:1a:3f:1f:63:63:5b:d4:39:2f:ee:8e:d3:7d:
94:d4:5d:4c:85:7c:35:e4:76:44:8c:06:d3:20:d9:af:2a:ea:
33:c9:13:d1:a9:21:81:3b:ea:e8:ba:73:1c:0b:21:2b:2b:eb:
82:d5:cc:65:69:50:33:ea:c2:e3:2e:89:6b:c8:27:ac:94:90:
25:3e:ee:3a:df:5b:e3:4b:ee:94:07:3f:f6:30:db:bc:b8:54:
5b:51:71:0e:5f:32:5a:5d:9f:b0:80:af:40:fa:19:e3:e0:ed:
82:8d:6f:3b:04:a2:56:ea:c2:f4:85:35:1c:1f:08:b2:fc:5d:
18:89:11:9b:d7:03:c2:12:bf:3c:5c:3f:ca:7f:de:e5:8a:85:
cf:5a:1d:8f:9d:fc:6e:e2:f0:96:95:12:ed:87:02:d6:3e:11:
f5:66:27:6e:37:28:a3:06:2c:ec:8e:b1:ae:71:c2:bc:af:ac:
cd:cd:05:a8:91:85:df:b1:46:4a:7c:3d:5d:d4:4f:c8:26:15:
95:76:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:22 2025 by rpki-client