Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a98942a4-16f1-369f-bc78-5066c85cc9b1.roa
File: a98942a4-16f1-369f-bc78-5066c85cc9b1.roa (raw, json)
Hash identifier: rP5wVTtbp/KeOPV/GySdMsZLWnjVtJzinw31d6AcE30=
Subject key identifier: 89:AB:66:DA:A2:E4:60:93:C3:84:F5:48:5A:D5:BB:79:F0:6E:37:A8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB06D17CEFB14CD8E11A0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a98942a4-16f1-369f-bc78-5066c85cc9b1.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.199.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:6d:17:ce:fb:14:cd:8e:11:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=59cfd738-815d-404e-8a4b-0042dee9d595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:6e:be:e3:d6:4c:70:af:48:21:ad:1a:33:
8c:c1:ab:52:63:a7:64:05:f2:9f:43:b1:72:ef:98:
79:7b:eb:b0:e5:c8:44:53:67:0b:cf:97:e5:11:1c:
13:a4:1a:44:22:59:d6:ea:b7:37:2f:e2:31:cd:65:
ef:2d:23:76:df:b6:f4:c8:b6:a6:cb:35:73:00:94:
cc:64:34:9f:08:a1:8d:55:1e:56:b4:a5:9d:33:05:
31:58:ed:e0:81:ff:0f:bb:24:2e:b3:62:97:8a:7c:
84:4f:10:93:32:a8:60:c8:26:f6:6f:2f:9b:c2:d3:
79:74:fa:fe:c0:7a:80:9b:2e:f6:89:b2:29:57:fa:
54:bc:6f:6c:09:9f:14:e4:1e:2d:14:f8:16:f9:8c:
a6:80:57:fb:97:d2:db:8a:19:f9:5d:9b:84:20:7a:
1c:39:2a:07:90:ac:0b:aa:ce:a8:c9:3c:42:c2:19:
82:ee:86:b5:de:31:11:28:92:c8:95:6d:51:4f:d2:
e6:dc:e7:7a:02:54:46:8a:5e:be:ae:43:be:71:6d:
6c:d8:19:da:1e:31:b6:71:95:fe:f9:ee:82:b8:97:
7e:2b:91:dc:a5:38:8e:48:22:37:82:ec:9f:ea:81:
1d:8a:96:98:89:47:6d:f1:62:72:10:96:a1:2a:ae:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:66:DA:A2:E4:60:93:C3:84:F5:48:5A:D5:BB:79:F0:6E:37:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a98942a4-16f1-369f-bc78-5066c85cc9b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:c7:98:15:62:d0:bd:c0:f1:f7:03:aa:8d:6b:da:d0:80:49:
e3:f5:c3:c3:7e:e2:a1:5a:37:45:2b:c1:3c:af:70:56:eb:3b:
90:cb:68:fa:41:5b:04:6b:5b:b8:f1:cd:e7:73:92:64:5e:3e:
93:72:b1:04:47:74:4e:3d:7d:3d:db:1e:20:de:4e:45:2d:4e:
ac:51:d6:41:23:4a:64:4d:cd:78:a7:af:5f:06:34:4a:c9:9b:
e6:19:ac:25:c0:58:71:5e:e3:a6:aa:ee:b8:cd:92:16:c0:a7:
2b:51:4a:46:bc:e2:27:c0:e5:03:88:17:0e:eb:7e:e7:ab:5c:
e1:4c:ff:1e:5b:0c:8d:8e:fa:4e:01:db:b9:6a:b2:c8:6d:0b:
ff:bf:f8:77:0e:40:95:a7:5d:6e:43:bd:72:29:fc:70:18:02:
80:7b:f3:49:ff:aa:64:e0:4f:3c:2e:2b:cb:94:20:bf:04:7b:
e2:89:64:fd:87:e0:85:c9:1e:c3:89:22:48:9e:d6:fb:28:42:
50:26:11:2d:dd:28:6a:15:70:1e:49:b1:cc:1d:9c:d6:f7:8d:
d6:dc:99:3b:97:50:82:ce:5a:34:5a:47:0c:2c:a2:cd:3c:fa:
b4:3f:34:53:75:68:19:1b:4d:a4:85:ee:8b:ce:f7:ce:46:7a:
ac:d7:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:43 2025 by rpki-client