Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a40112d-29a1-3718-b4d4-8ceea11ee456.roa
File: 8a40112d-29a1-3718-b4d4-8ceea11ee456.roa (raw, json)
Hash identifier: hnrHns4h/+Uxvd3RS37jgTbmuZ94p9UrT/fWESqftf4=
Subject key identifier: 1A:82:82:A1:9A:4E:4B:DA:48:75:0E:2D:F6:82:09:2B:0D:97:A5:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C9F529F82B524B1310440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a40112d-29a1-3718-b4d4-8ceea11ee456.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 73.122.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:9f:52:9f:82:b5:24:b1:31:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=c66c008f-b4cf-49bc-a9e5-ce01c01ce766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:5c:71:2d:19:ba:9f:54:4e:c7:d1:fc:93:
06:ab:7b:e8:fb:01:31:1b:d6:b8:de:ca:5a:ca:47:
e9:ca:74:20:15:50:78:69:df:c1:dc:8f:06:7c:88:
c0:f4:c5:ed:78:bb:c9:b9:65:d2:92:f6:42:61:4b:
e5:0a:85:72:93:bc:20:bd:12:7f:69:7c:fa:0b:e7:
b9:12:e6:19:27:3f:8b:16:cb:ec:d9:d6:92:8f:ac:
5a:a6:9b:bd:78:f0:85:07:7e:64:cf:74:53:4b:a0:
32:d6:48:4c:2c:88:11:6d:bf:18:f4:59:a0:87:7a:
2d:e8:1b:23:a5:0d:93:b1:5c:e7:47:54:cb:58:83:
ca:8a:e0:b6:50:fd:6e:a3:c2:c4:fd:c2:3d:0b:60:
67:f6:a1:df:07:6f:28:78:60:a7:89:81:55:7f:e4:
b4:f5:3b:23:46:30:ce:c0:a8:72:0f:10:c0:e2:95:
84:2a:11:85:be:35:ef:c4:c9:a3:d6:a1:4e:19:73:
37:ab:2b:29:14:9a:6d:92:9d:1c:de:2c:f0:9c:15:
4b:d5:53:dc:f7:3d:c1:10:58:a4:0c:95:2f:cd:a1:
33:9f:bd:6c:26:75:68:a4:89:74:c7:3a:bb:a0:ed:
2b:97:c0:9f:a3:b3:27:9d:36:b4:bd:8c:bc:a9:32:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:82:A1:9A:4E:4B:DA:48:75:0E:2D:F6:82:09:2B:0D:97:A5:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a40112d-29a1-3718-b4d4-8ceea11ee456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.122.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:a6:dd:ba:f0:ca:84:91:5c:d6:e9:cd:c3:12:16:ea:a0:7a:
cf:41:19:7e:9c:80:d3:cd:01:a3:cb:a2:62:fd:06:e9:47:66:
58:85:14:c8:b0:d4:a8:07:4a:79:04:56:e4:ef:82:98:ad:cb:
49:9d:ac:55:8c:33:59:9c:33:c4:bb:7a:8e:d7:0c:ff:39:b4:
aa:15:7b:09:8c:ac:3e:18:b5:5c:86:92:a9:97:ee:21:bc:6f:
f6:56:24:2b:fc:1c:b4:f4:b2:ca:fd:b2:3f:fe:b7:f9:92:16:
85:b4:ee:78:30:14:9b:79:7f:eb:11:e7:38:11:9b:ca:e5:a5:
29:56:a4:3b:60:bc:2c:ee:3b:60:00:30:81:51:a5:50:b9:52:
c0:16:e0:89:98:15:d1:6f:1e:99:4d:7a:fb:b2:ee:11:1e:9f:
26:55:b3:2b:a1:d3:9e:7e:df:2f:17:24:b6:a0:37:74:59:00:
df:87:fb:f2:2c:9a:c9:8b:6c:9a:6c:c4:d5:80:cf:7c:ea:f7:
3f:44:32:3e:18:30:f5:d9:b8:9d:e9:da:6c:c8:7f:7b:dc:79:
7d:5c:9d:03:fa:b6:56:ff:d6:59:08:47:67:2b:7d:ec:4c:bd:
59:b3:2b:6b:90:ad:fc:2e:9f:b4:1a:40:79:19:fa:21:1f:73:
1a:9e:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:51 2025 by rpki-client