Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/608b6530-4b45-33c7-be49-44bf6871f2ba.roa
File: 608b6530-4b45-33c7-be49-44bf6871f2ba.roa (raw, json)
Hash identifier: q+oQhvxqJMQJ20uT6AhH4zzGpqbl9OV1e9SJUGb32IE=
Subject key identifier: E9:99:75:3D:63:2A:86:7A:CE:5A:AE:B7:01:E6:CD:AF:F5:3F:09:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6D304ECF3C792A0C1F100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/608b6530-4b45-33c7-be49-44bf6871f2ba.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.25.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:d3:04:ec:f3:c7:92:a0:c1:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=0d4acd14-5c33-4f48-baa0-782e9049fe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:6d:3d:cd:90:68:c4:3f:45:57:dd:fb:ff:
ba:f2:24:43:f3:c1:cd:bc:ea:45:a6:b2:6d:49:9d:
ce:f6:ce:09:1d:c7:1d:9a:e9:b6:5f:fa:50:08:f6:
d0:2b:89:a4:cb:93:8a:19:8a:d5:8b:f4:99:77:f1:
51:a6:25:d6:aa:e6:0e:c0:72:69:cc:ef:c2:79:d0:
7e:c8:2b:19:e5:83:0b:33:5d:69:c5:dd:09:79:c4:
ee:bb:02:2d:b4:d3:65:80:50:65:e5:1b:1f:fe:cc:
91:fa:ad:00:a6:47:e3:c0:94:07:98:61:d7:7e:4f:
73:7e:a5:8f:ee:f7:1e:c0:67:43:e0:5f:5a:60:63:
d7:1d:4a:4c:61:6b:05:ab:28:10:e6:2b:92:05:1e:
67:48:75:1a:5b:a0:d5:05:ad:22:2b:01:4e:78:17:
ed:2b:69:de:66:bc:38:a1:28:ee:ce:21:08:dc:53:
bd:55:52:52:fe:31:1d:20:f0:cf:78:0d:3d:a0:87:
1e:59:13:75:02:97:6c:9c:ee:19:89:52:32:27:a9:
20:fe:f8:8e:72:cc:36:fd:96:a9:ac:07:89:e5:6c:
75:88:f3:23:39:08:a8:63:a1:cf:15:e1:78:ac:7c:
ed:d1:53:c0:a9:e6:c2:9f:52:30:ea:ce:b1:fd:c6:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:75:3D:63:2A:86:7A:CE:5A:AE:B7:01:E6:CD:AF:F5:3F:09:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/608b6530-4b45-33c7-be49-44bf6871f2ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.25.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:0c:6f:29:77:f5:65:6e:a0:62:42:8c:16:cb:9c:d4:f2:67:
8f:24:39:a3:a3:56:3c:99:11:93:21:90:3a:1e:cd:81:7c:d2:
2b:b3:68:0e:e6:23:90:ab:f6:7a:41:e4:cb:76:ff:79:06:71:
1e:50:9c:4e:10:c4:a3:fa:3f:b4:83:e3:0f:a4:21:f3:b4:17:
2a:4b:5d:e8:8e:32:c5:c3:89:4c:d5:4b:95:e5:8e:a4:b4:c6:
ba:fb:b0:93:f0:d3:dc:62:75:07:6e:f0:d1:3c:d2:5b:cf:cc:
90:39:e7:f2:63:e1:87:90:98:e0:83:e1:c9:2b:4e:33:b4:8f:
f0:00:2c:41:fb:37:b4:95:e1:64:ef:82:7a:8e:86:9b:8d:05:
e8:d7:f3:c9:53:a3:c2:43:56:46:82:fc:80:a6:e6:02:f9:78:
cc:c9:d7:fe:ac:90:db:ca:0e:74:33:49:32:13:c7:59:0e:20:
32:39:9e:05:2b:b0:ac:c4:e1:aa:b4:88:b0:48:c2:f7:65:0c:
19:95:fe:07:ed:34:7e:fb:e0:62:ff:db:86:6d:b6:78:35:6d:
f5:41:7f:2c:1b:c7:5d:96:34:6e:58:11:88:5c:4d:30:6b:ac:
2f:e4:b7:1b:ad:3f:15:63:7e:3f:22:03:25:7c:89:c5:3b:48:
02:98:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:54 2025 by rpki-client