Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f7a7e22-68d2-3924-ba12-cba3db07a7e1.roa
File: 7f7a7e22-68d2-3924-ba12-cba3db07a7e1.roa (raw, json)
Hash identifier: 9C8KSGKyIZvnm7IYxZpdLCK7K3WkWtRtFH3rX7CkE+Q=
Subject key identifier: 27:02:CE:13:91:DD:4F:D2:1B:0F:67:C4:D9:A5:20:E6:DB:C5:63:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF5F277B518DBE1E327700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f7a7e22-68d2-3924-ba12-cba3db07a7e1.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.102.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:5f:27:7b:51:8d:be:1e:32:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e8076142-61e3-4c6a-a57e-b1580b4cb73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:36:1c:94:37:75:34:8b:57:7e:90:e4:8f:
66:14:3f:7a:73:d0:26:0a:70:49:84:5e:20:d1:e8:
93:4b:dd:f3:10:ba:7c:b9:ca:0a:f9:09:f6:7b:9a:
04:19:96:c5:0b:90:87:f5:b3:0a:3c:e4:6d:a0:80:
17:9f:ee:8f:6e:fc:09:10:6e:20:fa:4d:0c:a8:7f:
99:fb:f2:74:18:11:4a:e8:58:e1:a0:33:87:40:76:
d5:30:4d:80:bb:3f:01:86:33:df:1c:41:ff:c5:f5:
a0:18:bc:4f:64:44:4f:8e:1e:d9:21:89:39:fa:22:
67:45:c0:3c:d1:40:ca:43:0e:ae:40:f6:eb:1e:71:
ec:3c:bf:40:18:16:93:7a:9d:66:51:8b:4b:9e:10:
5f:d1:25:4d:ba:78:35:d3:c1:00:91:e7:01:7d:a9:
01:94:45:6e:12:c1:c7:ad:2d:32:a1:d1:ca:5e:7d:
64:d6:68:cb:db:0b:1c:c4:5e:db:88:ee:1e:15:d8:
7c:2f:cf:be:61:8e:78:ed:63:c6:a9:63:a1:09:4b:
40:9f:74:12:03:eb:89:41:aa:29:bb:9e:d8:cb:49:
aa:41:d0:5b:d8:4c:60:60:b1:e1:f7:86:14:77:ae:
97:21:0b:fd:a0:38:15:92:d7:ca:f1:e2:e3:56:d9:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:CE:13:91:DD:4F:D2:1B:0F:67:C4:D9:A5:20:E6:DB:C5:63:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f7a7e22-68d2-3924-ba12-cba3db07a7e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.102.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:74:73:46:2c:79:45:88:0d:62:3b:5e:57:3a:f6:60:2d:a3:
c3:c4:ee:ba:a2:ba:8a:32:96:1f:48:9c:2d:5e:e0:71:9f:a4:
ad:f3:05:be:b5:6d:3e:d6:77:a4:8d:12:1b:4f:d2:48:ce:c9:
58:5a:43:85:46:5a:be:5c:09:97:80:9c:c1:f4:e1:c2:3a:de:
58:b9:b0:96:72:11:b5:a3:de:cb:ae:db:3a:d5:ec:23:b4:1d:
ec:41:e4:bc:1d:cb:f7:89:26:38:39:12:5b:b2:16:1d:f7:3c:
4a:12:6b:8a:b5:f1:7a:d8:73:5d:83:21:d6:f3:c2:46:00:a6:
8f:82:ce:13:26:a1:93:e4:e1:1c:f9:03:be:d6:a5:e9:a8:8e:
45:27:23:09:9b:2d:e8:0e:06:4b:41:1e:58:d3:d4:43:d5:8e:
71:ae:68:60:25:43:d1:30:56:e7:bd:19:47:4b:99:6f:9c:c3:
83:91:84:d6:ae:85:92:3a:16:5a:5f:c0:97:2c:7f:2f:8c:23:
48:98:ea:88:cd:ec:e3:39:e1:9b:99:5e:ab:01:44:3f:3e:ae:
aa:fd:75:78:63:04:34:de:78:2e:4c:53:92:b8:e6:ad:0e:77:
0b:38:14:4a:e2:5b:0d:fb:3d:a3:47:df:82:eb:8a:7b:f9:0d:
12:67:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:28 2025 by rpki-client