Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a778b594-9351-324d-a748-5a2546ef7c21.roa
File: a778b594-9351-324d-a748-5a2546ef7c21.roa (raw, json)
Hash identifier: jr5N443oHLIr7P1tOGl8dEWXe0ITSS9iQnPtr+m9tiQ=
Subject key identifier: 24:82:90:11:34:64:87:AF:6F:F9:68:D4:CB:96:58:B5:95:A6:F7:3F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CF574FB6680A20DEB87C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a778b594-9351-324d-a748-5a2546ef7c21.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.58.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:f5:74:fb:66:80:a2:0d:eb:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6dfaeb49-ff58-451f-84e1-aac623ad6b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:e7:b0:4e:d8:40:c5:e5:89:8a:be:c6:3f:
5c:77:90:3b:e4:89:61:c7:95:a0:7a:92:fa:d0:6e:
3f:4a:22:33:22:77:ed:79:69:60:ba:d8:67:45:9f:
70:19:bb:e5:a7:97:a6:66:a6:51:00:95:e0:35:40:
76:30:de:ef:97:f2:ca:f2:1b:55:f5:0d:ca:2b:05:
84:c4:2b:1b:47:12:5b:7a:8d:bf:0a:66:9b:82:f5:
f3:45:dd:e3:61:98:3b:7a:10:35:c8:b6:1e:e0:b4:
cc:1f:3a:8b:89:5f:89:8f:65:31:70:31:d9:8b:c9:
ca:6f:34:f9:0f:27:a8:07:ba:34:8c:ab:63:8c:99:
f1:35:0d:5a:17:b2:d6:38:ff:28:01:15:96:ea:0b:
7b:d9:ce:19:d3:28:d6:00:36:0e:b8:af:3b:b9:17:
d6:56:7b:bb:2b:86:5e:a7:5c:c6:d7:51:63:04:b7:
49:d2:12:0d:b5:64:93:dd:65:5c:92:6e:3a:fe:bc:
d8:8e:e0:fd:b9:8e:a5:ae:05:a0:68:3f:a2:cc:04:
0b:bd:3d:54:7b:1b:fd:bd:af:25:a2:75:90:a5:cf:
b3:03:6e:0e:4a:b1:67:b4:9e:09:ba:36:8e:41:9d:
43:d7:79:fe:6f:9c:64:a4:72:fd:7e:c5:04:2f:15:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:90:11:34:64:87:AF:6F:F9:68:D4:CB:96:58:B5:95:A6:F7:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a778b594-9351-324d-a748-5a2546ef7c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.58.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f6:bb:8c:cb:86:8f:3b:64:52:2a:8a:43:bf:54:8d:ba:82:
14:16:38:93:21:bf:d2:70:30:cc:ea:bb:87:11:d0:f2:4d:0d:
da:f8:d3:83:ef:14:22:5b:13:53:58:7b:df:65:5d:6b:c4:e7:
87:7a:3e:7d:b0:6e:3e:3e:a1:78:31:e0:e2:81:8d:3b:6e:a2:
36:3b:ec:3f:06:62:e4:d2:91:4d:00:77:d5:19:f0:b1:1c:ae:
7d:d5:f6:ea:65:7b:ff:a8:fb:c2:9d:ac:2c:4e:9a:6a:0a:b0:
0c:e0:e3:9e:9b:af:cc:f4:7c:30:41:e7:3e:81:18:84:ad:d5:
57:b5:99:ae:19:10:f7:53:e3:5c:81:fa:a2:81:3f:53:38:d2:
10:1a:3a:ae:2e:a0:7d:b7:98:f3:c2:99:5e:f8:4c:ac:7d:1d:
28:ae:2e:74:c0:ca:8b:58:a5:f6:1f:41:a6:1e:e3:83:8f:95:
eb:4a:21:17:a2:94:0d:3b:e5:d2:b5:f2:73:f9:8d:90:fd:3b:
a8:06:5f:da:7a:32:8e:01:b3:ba:3b:98:85:ce:bd:66:35:ba:
7f:3b:b3:f3:9c:f1:62:8c:79:28:dc:ad:85:5e:8f:97:5a:51:
bf:9e:40:4a:f3:58:cc:da:63:2b:56:b0:59:9c:6d:28:ec:e6:
4e:53:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:51:40 2025 by rpki-client