Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f72e610-6280-3af9-8ff5-3a6fff351ffd.roa
File: 8f72e610-6280-3af9-8ff5-3a6fff351ffd.roa (raw, json)
Hash identifier: Ggu3is/d4li4lFuuUHuM5oqIQrAupx6bk3GqSryZH88=
Subject key identifier: 88:63:BC:92:AB:57:10:BF:05:A8:F6:3A:95:40:0F:12:43:62:87:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0F9D718DB2C3850332C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f72e610-6280-3af9-8ff5-3a6fff351ffd.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.208.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:f9:d7:18:db:2c:38:50:33:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0913c9c9-b30f-426c-aa2b-e5a42f79d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:2b:c6:bd:08:34:3f:44:b7:c9:ee:04:f3:
27:58:e5:02:c5:00:e9:ed:17:4c:24:59:73:a4:56:
be:ff:94:cc:f9:bf:a6:33:0c:1e:8f:be:58:33:53:
32:d2:dd:48:d7:5c:fe:dc:a4:e9:ef:d4:fc:15:7f:
9f:65:9f:e6:7f:22:4a:ad:b2:53:ad:f3:95:3b:41:
5b:5b:32:9a:de:b5:df:24:41:c7:da:4e:0e:41:30:
9c:15:cb:5b:b4:e0:69:f1:c5:ea:ea:47:a9:2a:82:
12:43:21:7c:db:35:7e:0e:de:d7:18:4c:4d:7e:5b:
82:83:fa:ab:95:15:52:20:81:e6:93:bf:77:fa:28:
9e:ea:3c:17:c5:d6:37:3a:05:16:a1:ca:e2:82:6b:
79:dd:07:fd:b6:ae:c5:c8:2c:4a:15:26:96:25:c6:
51:2d:ab:dd:e9:41:19:e3:fa:97:1f:ae:65:a0:42:
35:ff:9b:c5:08:aa:e3:9a:b7:52:7d:35:3e:a4:0f:
1c:1d:d1:e3:bd:89:4c:d3:b1:06:cb:9e:57:d8:21:
22:4f:54:5c:77:9a:00:87:8f:d3:99:8a:3f:9f:4f:
cf:73:a4:ca:fe:99:41:85:3c:06:4f:98:d8:29:89:
39:60:b3:3d:e6:74:b4:3c:06:01:2e:05:84:49:90:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:BC:92:AB:57:10:BF:05:A8:F6:3A:95:40:0F:12:43:62:87:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f72e610-6280-3af9-8ff5-3a6fff351ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.208.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f7:e0:9e:19:e9:f2:7e:cb:53:ad:49:33:42:c4:c9:47:cb:
db:08:e0:66:2a:f3:05:d3:93:02:79:20:7c:99:e6:42:20:94:
4b:50:57:ef:7b:75:01:65:75:6d:c8:8e:ee:85:cc:3d:0c:a7:
9e:b3:70:ab:bd:2a:62:b9:4e:1f:77:5a:61:b3:03:73:07:f7:
64:29:aa:d1:b7:7c:88:70:1f:65:c9:dc:35:c1:ec:b1:81:77:
88:cf:bc:b6:30:75:ae:2b:ad:61:8d:85:03:9a:80:ff:a5:11:
c5:75:42:f2:fa:0a:46:91:4b:3b:66:75:68:84:4c:3c:27:d0:
1c:1d:65:ae:d0:dc:47:e5:2a:97:9e:53:08:0a:9a:88:1a:e0:
15:ba:f5:13:5d:23:44:5c:86:68:67:1c:6a:44:ab:f6:5e:65:
23:52:e8:9b:1c:7a:11:39:e0:47:44:27:3d:90:0a:67:dd:e5:
af:a2:f1:a1:17:6d:26:a9:4d:ad:85:64:c6:a9:81:1b:10:29:
a5:58:f1:6d:6d:79:a2:2d:bf:1e:72:d7:35:a5:3a:24:ed:3a:
27:58:a7:40:1c:10:db:65:cb:f7:30:3b:4b:ad:9c:a0:b1:72:
33:e7:68:cd:46:9b:b7:ac:a0:9c:dd:47:3d:97:f0:54:6e:c2:
4b:df:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:18 2025 by rpki-client