Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94f16bd9-2b85-3667-89a3-7a356856453f.roa
File: 94f16bd9-2b85-3667-89a3-7a356856453f.roa (raw, json)
Hash identifier: R7CS9hQFwe3FFgf7edrknTT+sAws5wy9fvLbdxTVX/o=
Subject key identifier: BA:6E:98:0C:A3:27:C4:1F:FA:59:3E:E2:95:88:BE:88:F5:F3:CE:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF7754176617271BDBB0F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94f16bd9-2b85-3667-89a3-7a356856453f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.22.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:77:54:17:66:17:27:1b:db:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=c9b36c2b-7ab0-40ab-bf6b-842525b3e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:22:f7:fe:51:92:34:6f:86:54:30:72:0f:
69:6d:3d:38:30:56:f4:43:fb:67:cc:8b:a0:b7:85:
6f:3f:5c:ae:28:9d:30:1c:c0:cd:b3:17:f4:a5:2e:
0d:3d:8f:64:b3:36:ac:d7:f6:17:52:b8:a0:c5:4f:
74:f4:0b:83:9b:3c:26:fc:4b:fe:54:f0:eb:a4:84:
79:60:8b:58:fa:1e:80:14:bc:6b:e6:7c:fc:ec:a8:
04:e4:0a:b4:22:a3:40:6c:b6:dc:39:6b:1a:63:57:
62:93:82:e1:f6:9e:b8:e3:80:a9:27:48:63:c6:dd:
f4:d6:8a:19:f2:80:7c:53:91:de:86:09:41:08:af:
76:8f:ef:b3:35:6d:62:ca:82:b2:ef:2f:d1:b0:ab:
20:d4:1a:6f:a0:cd:1c:e0:ba:7d:06:5a:65:6e:54:
c2:e1:9c:d8:64:60:52:6b:23:67:b1:04:8f:2a:c3:
31:5f:41:1d:4b:e2:e4:58:9e:00:2b:5b:1b:e0:6f:
89:5a:74:48:f4:d8:1e:bd:cc:c0:00:05:d8:ce:74:
de:14:31:d9:3e:72:d7:ca:03:e7:60:83:e3:32:9c:
19:9e:41:91:6f:2e:f4:13:d4:6d:09:7f:28:fc:ce:
8a:5a:c2:d6:ed:c2:48:8e:9c:c9:dc:35:cd:f5:d3:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:98:0C:A3:27:C4:1F:FA:59:3E:E2:95:88:BE:88:F5:F3:CE:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94f16bd9-2b85-3667-89a3-7a356856453f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:29:4d:02:a6:a0:24:c8:5e:74:53:9e:9f:c1:54:23:42:88:
76:39:57:01:73:4b:5b:a8:5e:25:72:fb:56:f7:ab:ca:e5:df:
43:34:1e:43:d9:0d:15:2c:91:0e:a9:50:02:50:c2:82:25:6c:
4e:a5:18:58:89:24:b8:b9:23:da:87:ec:05:32:ec:c3:98:2a:
08:72:d2:2d:79:fc:46:d0:74:98:60:fa:0b:e1:3d:50:2e:72:
92:d5:58:e8:4a:07:7e:a8:bf:bc:60:5c:49:15:2b:44:57:fb:
9b:d7:9b:73:13:91:ee:e0:85:44:cf:49:af:f5:60:85:51:18:
c9:34:a7:94:5f:77:41:91:f4:06:d8:ce:28:78:81:1d:76:6f:
d4:3a:80:5c:47:3f:d0:89:f2:ab:b0:5f:37:cc:aa:e8:ad:3b:
05:73:0b:00:71:64:a5:32:ea:a5:47:72:5c:48:64:d5:7d:f5:
4b:2e:d7:1b:d8:d4:a9:6a:72:4f:f0:3d:1f:e9:58:52:e8:13:
8d:f3:5c:74:4b:7b:0d:a3:64:81:2d:5a:b6:a4:6c:7e:fc:37:
e3:4b:28:45:26:98:b2:21:1d:6a:bc:9b:3b:7c:f0:5e:d8:78:
57:7c:09:eb:c7:44:8e:d7:1f:e3:69:41:7e:0e:6e:f9:25:99:
25:97:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:35:03 2025 by rpki-client