Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/620d3257-67f0-3233-a8d6-dacd8a542d42.roa
File: 620d3257-67f0-3233-a8d6-dacd8a542d42.roa (raw, json)
Hash identifier: C9X5Om8AlkZ4Vmly1+/pr9hq6kDf+kgiksQbZGAgmcw=
Subject key identifier: EE:80:1D:88:F7:2C:84:10:B2:A9:BA:0E:E9:2A:8D:00:D8:04:52:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB00F9A13D9A8D47CF26A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/620d3257-67f0-3233-a8d6-dacd8a542d42.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 73.71.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:0f:9a:13:d9:a8:d4:7c:f2:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=16b8163b-b776-45a0-8a48-0c4ae16d9e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0f:ad:57:d8:9e:74:7e:80:f1:cd:97:3a:89:
a6:63:90:a3:81:bd:bb:4d:44:a3:b4:54:53:63:fd:
fa:c5:b2:0d:1c:d5:5b:ce:c7:4c:c0:5d:ff:b3:4a:
d7:3b:25:c4:99:b6:54:0e:ee:6b:fc:de:17:04:bc:
16:c8:78:83:f3:64:29:65:0f:45:6e:5f:e5:84:ab:
dd:86:20:4d:dd:67:26:3a:c8:7d:dc:7b:3c:8a:b4:
a7:49:67:79:00:d0:da:66:7c:b9:25:b5:9c:21:fe:
75:d1:ca:00:c5:33:08:13:71:ce:10:8b:ab:75:e3:
50:80:ac:8d:4e:21:0e:b5:35:cd:cf:42:09:2f:84:
66:18:f6:2b:43:52:2c:bf:d8:78:7e:80:53:d5:55:
ab:31:76:6e:a4:7b:30:5d:fc:57:5e:3f:48:e6:d4:
2f:8c:ff:92:c7:97:93:0b:f2:72:6e:bd:1b:34:19:
47:ca:7b:26:93:1b:e9:dd:d8:31:9e:cd:03:68:06:
89:ee:4f:28:c3:25:3f:c7:36:61:3e:cb:20:be:4c:
3d:cf:ff:81:95:0e:a2:74:07:c6:1c:46:56:e2:fc:
16:40:41:bb:65:8c:42:aa:53:ba:25:94:ff:5a:b3:
ec:e3:87:46:27:25:df:c5:99:d7:58:9b:74:89:e4:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:80:1D:88:F7:2C:84:10:B2:A9:BA:0E:E9:2A:8D:00:D8:04:52:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/620d3257-67f0-3233-a8d6-dacd8a542d42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.71.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:7f:a1:0d:8c:74:07:8e:ab:10:4c:b7:df:5c:75:05:7e:a0:
ee:c4:24:f9:d5:87:a3:f8:41:3a:9e:28:d8:b0:1c:8a:ef:b8:
08:f8:10:94:30:94:6e:04:35:36:d0:42:29:dd:37:35:94:43:
13:b2:86:02:19:f5:59:bb:49:0a:87:72:f3:83:15:74:ee:ea:
68:3a:c8:41:e0:ad:08:3d:4a:b8:c3:77:e3:fc:d5:fc:e5:4f:
69:f9:6a:8f:1e:27:cf:df:34:70:2f:cc:83:a8:4e:10:b5:51:
78:ef:4c:3b:06:ed:68:84:81:66:cc:11:0f:18:73:e8:63:ed:
1d:48:97:e6:cc:b7:c7:56:e9:31:44:a3:c9:3f:f2:6e:60:ed:
a9:49:2f:a8:17:6c:d4:18:44:aa:5c:49:eb:88:d2:fc:4e:43:
c7:47:d2:4e:65:dd:ed:e4:db:9a:89:63:07:fc:95:36:0a:c1:
0a:87:6c:f2:e4:45:25:94:dd:37:1d:23:d0:7b:f6:1d:7c:3f:
66:b7:27:0b:4c:ac:d4:63:3b:65:b8:f1:cd:f1:d3:1d:70:c0:
6c:b6:8a:e0:d2:8a:70:de:ea:2c:2c:f9:e2:1b:7f:29:bd:1b:
a0:c8:f3:de:d3:fc:5d:db:72:ef:b0:30:45:50:06:88:32:e0:
8e:54:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:37:05 2025 by rpki-client