Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98c96075-b5bf-3c0d-8d3f-f683d329d989.roa
File: 98c96075-b5bf-3c0d-8d3f-f683d329d989.roa (raw, json)
Hash identifier: nnuCQgA7M+i/7yDWA61tmb/7REDzcTb1g7Mf/WJ5quE=
Subject key identifier: 7E:98:9F:B5:F2:19:B3:B6:25:F8:C0:53:98:A0:CA:7F:13:D9:8C:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB18D8DEA8CDBEA52C4F440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98c96075-b5bf-3c0d-8d3f-f683d329d989.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 73.170.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:8d:8d:ea:8c:db:ea:52:c4:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=88f6c4e2-5de9-4b5b-bade-1ecbbeb1612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:e3:4e:98:cb:c5:16:d8:6e:2d:30:6c:f9:
c0:51:61:94:a6:76:00:33:07:6c:aa:b7:b6:9e:45:
29:d2:a2:20:98:8d:9a:0c:8b:16:ce:69:c6:b9:7f:
ab:7f:8c:3b:db:95:58:5b:32:d0:84:d7:a6:93:69:
cc:43:eb:e6:88:0d:98:0c:1d:71:87:70:38:6d:76:
09:4a:2d:70:35:93:81:8a:a7:fc:ba:25:aa:07:72:
aa:47:8c:78:d5:98:3c:28:a3:ab:7e:86:7e:ba:1f:
1d:09:6c:84:90:4f:55:34:89:ab:1f:0f:38:80:ee:
ac:e6:c1:6f:1a:63:9b:cd:5e:d8:3d:4a:8f:e2:c4:
2a:1e:3e:13:c8:39:bd:a2:b0:4d:a9:f9:86:26:61:
03:76:00:68:79:56:c5:89:de:5e:5e:62:90:f5:f3:
0e:b9:f4:f7:4a:cf:4c:b1:0f:db:85:f8:f3:01:8f:
92:90:8b:1c:87:90:ad:6f:f8:d1:84:77:89:d4:12:
2a:06:60:f4:71:aa:38:16:b1:01:5a:fc:0e:db:63:
51:bc:96:06:46:b4:6b:7f:26:0c:63:76:e9:60:08:
cc:e1:57:09:18:32:e8:04:0d:99:4a:ce:08:89:8b:
1b:c1:07:3f:c4:d1:42:47:9c:e5:ba:32:3d:0f:aa:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:9F:B5:F2:19:B3:B6:25:F8:C0:53:98:A0:CA:7F:13:D9:8C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98c96075-b5bf-3c0d-8d3f-f683d329d989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:df:d2:ed:7f:d0:27:6d:bd:da:d2:ec:b1:3c:b3:e9:67:d1:
ac:97:bd:6e:74:a3:77:49:79:d1:3d:0a:3a:2f:3d:05:70:fe:
f7:ae:1e:cc:f8:b4:50:3d:e5:59:b1:d3:c6:95:47:52:3c:13:
e4:42:12:87:79:18:e1:81:02:43:c3:76:69:58:6b:9a:79:74:
3d:7d:23:5f:6b:84:59:36:a6:65:47:d4:01:42:df:7f:89:f5:
79:2e:df:6b:54:1b:bc:e7:7e:72:5f:04:f1:3e:d4:31:8a:88:
6a:3f:5a:67:25:74:64:2c:b5:23:fd:a1:41:65:08:c4:be:98:
34:bd:c3:c3:ba:21:e8:5f:9a:64:bc:df:ed:83:1e:46:b9:30:
fb:f6:37:7f:a0:8e:d1:9e:f6:02:60:42:92:7b:6d:be:7d:62:
e0:9e:34:01:5b:e9:d7:df:e4:93:a1:b9:53:a8:05:04:16:20:
53:b3:28:52:46:d3:54:7b:14:c4:4a:51:57:ed:cc:d7:bb:08:
98:19:1f:7a:3e:ae:13:55:3b:f0:ca:5d:fa:0c:c4:64:ba:73:
80:c4:4a:f5:6f:93:7a:0b:77:e3:45:95:e2:56:05:ef:4c:bb:
50:e6:35:ca:8e:2d:68:0b:d2:45:fb:ff:1d:7c:ed:a9:d3:cd:
2e:9d:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:44 2025 by rpki-client