Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5312110d-6cd2-3489-acb6-a62b5372f7d1.roa
File: 5312110d-6cd2-3489-acb6-a62b5372f7d1.roa (raw, json)
Hash identifier: 4sv9TYs+yqdwmu2UVkaXsucVbZSca6KDH4972tKhDU0=
Subject key identifier: C0:F6:1A:23:7E:C8:59:74:A5:3D:65:12:FD:39:1D:4C:19:B1:F2:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0A56A1B24582026944000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5312110d-6cd2-3489-acb6-a62b5372f7d1.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 73.188.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:a5:6a:1b:24:58:20:26:94:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=a9627dc8-2091-4799-89da-a6a8febd1bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:f5:91:43:e6:2f:67:0f:94:50:d3:0a:f9:
45:5c:78:28:a2:22:97:86:87:99:99:05:fd:45:98:
28:ec:be:e1:94:6b:35:36:ba:a0:1a:7e:a7:74:7b:
11:86:5b:c6:58:b6:e9:4d:05:62:79:27:cb:c6:4e:
bf:f4:14:12:bb:12:b2:46:8c:d5:c3:f5:df:43:e5:
51:f5:c3:8a:8e:df:d9:53:d6:bf:9f:14:11:c2:62:
d1:66:7e:12:b9:8e:3d:30:a3:9d:af:5b:23:0a:99:
a5:14:85:b5:db:a0:e5:00:c7:e6:a3:6c:e6:c0:1d:
e1:42:db:f5:63:d4:e9:cd:e9:90:2a:1b:37:38:f2:
76:9e:db:a4:a3:a1:0f:dd:75:ce:ec:be:0c:df:e0:
ed:67:d0:55:e2:58:e1:35:75:c6:e5:78:e0:99:14:
91:b0:c1:3d:2b:5e:c9:41:a5:00:ff:aa:cc:4d:91:
81:20:1d:ae:58:c9:29:09:5b:27:d6:0f:04:1d:ff:
5a:9c:cc:dc:f6:73:f4:ac:41:85:04:93:80:41:9e:
20:40:82:73:17:97:ae:3c:ce:33:6b:1b:66:dd:b3:
06:de:be:53:5d:b8:f1:44:26:67:30:69:2d:f0:82:
bf:ed:e6:b3:d4:91:37:ab:ac:a9:55:00:16:d9:c5:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:1A:23:7E:C8:59:74:A5:3D:65:12:FD:39:1D:4C:19:B1:F2:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5312110d-6cd2-3489-acb6-a62b5372f7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.188.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:6a:d1:c4:3b:7f:ce:f2:1c:35:6e:fa:53:62:1e:0c:e7:48:
10:90:6d:83:9b:b5:ed:66:c6:8e:5b:9a:be:c1:b3:0a:9d:1c:
99:5b:b6:c5:94:7d:4b:de:95:49:8e:e7:65:c1:23:d3:39:63:
45:9b:48:ff:ee:0f:25:04:8c:bf:7c:87:e1:8f:fc:31:36:f8:
84:12:84:26:a6:bd:0a:32:19:e5:56:5b:b3:6b:65:48:70:18:
57:c7:04:da:3c:b4:2a:36:d4:df:e0:f8:1e:a6:f3:85:23:15:
c6:dd:e9:70:2d:de:ed:5a:4c:e8:83:2e:df:d4:f3:a4:59:5d:
5e:af:42:b5:1c:a1:13:47:57:87:d6:14:5f:fd:f0:66:e0:e6:
9d:ec:1e:ef:99:46:20:70:34:cb:ed:dc:c7:f8:49:0f:87:96:
13:aa:82:64:10:1e:29:25:de:c8:98:64:10:fd:3a:64:5b:d6:
9f:31:e6:4c:99:31:21:a2:6f:fb:be:33:17:56:4a:e8:a1:4e:
82:3d:35:8c:94:36:15:8c:37:b6:80:14:df:e3:6c:ee:6c:ad:
d6:a2:b8:50:7b:a6:ea:dd:c0:7b:77:2e:c1:f6:91:aa:02:34:
ed:2c:6b:63:07:75:f0:59:4d:72:9f:29:58:1c:cb:a9:6e:d4:
f7:44:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:46 2025 by rpki-client