Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58f12e9e-364c-310b-bf09-0655770d1af0.roa
File: 58f12e9e-364c-310b-bf09-0655770d1af0.roa (raw, json)
Hash identifier: C/ATiPSnr3fBYk0omReRtSkPYTm9DQCRVrS0rsRzVlY=
Subject key identifier: 66:C9:ED:9C:03:E2:FD:17:FD:69:7C:B8:02:29:0C:8D:AC:A4:9A:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0621C76248800571A34FA
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58f12e9e-364c-310b-bf09-0655770d1af0.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.194.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:62:1c:76:24:88:00:57:1a:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5bd531cb-ac47-4cbd-9959-ba425b802ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:25:f2:8b:c8:ae:05:9f:7a:9e:e3:68:ed:
78:c3:c5:74:d9:96:45:d8:9f:9c:93:28:a7:67:71:
dd:96:f9:24:bd:ae:a9:e8:4e:16:7a:8f:0f:20:61:
40:cf:28:5e:d3:01:cf:43:f6:8d:94:dd:10:85:cb:
15:95:3c:b0:52:95:f8:36:0f:df:a3:c1:56:47:5e:
31:9b:fb:d4:fb:bd:0e:ce:05:ab:cd:25:2d:a3:22:
d1:10:50:25:32:d0:dc:05:41:d1:c1:15:a4:84:cc:
2d:9a:6e:0e:66:3e:d6:5d:d5:26:c2:96:ba:17:c7:
62:b9:21:70:ce:16:ff:c3:7a:71:74:51:dc:75:e6:
0b:7d:8b:f9:a3:6c:7c:af:e9:a8:10:93:77:7d:73:
7d:87:0c:83:fb:a2:df:90:18:71:a2:79:35:11:8a:
76:1b:12:87:bd:c7:23:83:70:83:66:58:69:17:67:
b7:87:69:8c:16:15:09:07:02:88:2e:5c:b4:02:e9:
3c:c4:29:e2:01:38:ae:02:a6:91:c9:a0:e5:43:d4:
61:6c:0c:f2:3b:d5:10:3f:93:76:74:49:7b:bf:68:
cd:ad:f0:80:fa:d7:05:6d:70:03:d9:2a:5b:e2:99:
c0:29:ff:be:ad:81:9c:ae:6e:20:69:c0:5c:99:b0:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:ED:9C:03:E2:FD:17:FD:69:7C:B8:02:29:0C:8D:AC:A4:9A:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58f12e9e-364c-310b-bf09-0655770d1af0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.194.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:fe:20:09:32:11:81:37:03:c6:78:e1:9d:04:b1:06:45:e9:
f1:1f:02:2b:9a:b2:12:d2:73:7b:94:54:7d:c4:7e:d5:94:4c:
52:e6:f8:75:7d:b6:d5:3d:8e:52:7c:8e:ae:c3:34:aa:c5:f2:
ae:75:e1:d9:95:fd:ff:1f:d1:32:52:ca:56:92:a5:d3:30:ed:
8b:f8:b1:02:a6:e5:51:b4:d1:06:fe:c7:f2:f6:80:4b:c9:68:
d3:1b:a5:13:f3:71:b9:f0:4a:15:75:ce:97:31:b6:08:ec:66:
57:fd:31:76:a2:79:28:72:7a:8c:59:ab:d6:80:ed:70:c8:13:
a7:24:92:20:7d:b1:d4:b5:49:f5:24:1f:46:12:44:6e:c4:07:
4b:fa:12:d2:e6:9a:c1:f2:90:6d:78:88:f4:d6:4b:b9:0c:05:
08:5c:b1:ff:b1:12:87:7e:ac:8a:44:43:74:1e:78:82:c6:fb:
f4:32:d3:ee:6d:45:16:04:36:96:53:2f:d3:07:7e:4f:34:e2:
35:40:9f:67:b9:78:63:02:7b:43:c7:ba:e3:af:9c:d6:76:41:
f2:fc:9c:86:45:e0:c8:a7:a4:50:51:86:e2:fd:04:fe:08:32:
f0:35:ba:29:b7:75:03:c5:f5:7a:d3:68:2a:55:30:78:e2:c7:
1e:01:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:28:02 2025 by rpki-client