Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa
File: ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa (raw, json)
Hash identifier: +dV/WP70cHOnJG89GSTbGmBOZOdMA97Is/+9qYywvm4=
Subject key identifier: C2:4F:EA:34:32:EE:B0:B4:43:7B:F0:78:90:AF:D1:69:27:68:09:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F93314AEF31830D6FF14A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.32.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:33:14:ae:f3:18:30:d6:ff:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d085b940-00e4-444a-b4c0-4f1ef4869e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:50:7a:28:e5:12:6b:c2:67:20:40:75:15:
44:7b:1e:e0:69:d0:5b:b8:bd:f4:40:22:01:e3:8b:
7f:fd:fb:e9:38:4d:1e:b5:d8:c2:eb:5b:1e:3e:10:
25:52:9c:c8:96:96:7a:ce:d5:1f:e3:4d:59:89:44:
9e:81:7a:19:e1:fb:ea:04:93:87:5b:8c:54:20:6f:
e9:6f:ee:96:71:1e:c1:e6:91:55:ff:5a:e9:ad:2b:
cf:bd:88:0c:38:5c:1a:8f:d0:37:4a:91:22:e9:f0:
1e:22:4c:57:4e:5d:f2:c9:cf:c5:54:04:f1:43:64:
3d:ad:f1:7d:3b:c6:02:8e:4e:d0:36:43:f5:6d:c0:
76:2f:40:5d:97:47:75:46:3f:df:cd:5d:e9:8f:f0:
17:00:f1:d6:f5:4c:7c:de:40:31:af:74:21:eb:5b:
28:90:00:a4:81:79:32:38:53:c4:0d:c7:e8:92:85:
9f:34:a1:68:ca:ba:74:7e:c9:cd:4a:0d:fe:61:ff:
68:14:ed:49:3c:ea:e3:1c:7b:74:1b:fd:3c:e8:35:
31:1c:b0:6a:aa:cb:c2:b6:bd:6c:e9:bf:f9:18:56:
ef:5f:98:4f:a9:9f:6f:85:c6:ba:85:99:35:71:64:
70:d4:7e:53:e3:46:81:14:66:81:2b:a4:df:84:9a:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:EA:34:32:EE:B0:B4:43:7B:F0:78:90:AF:D1:69:27:68:09:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3b1e24-a9b1-360c-af8f-f1749f87894f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.32.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:91:72:3c:ee:aa:88:55:6c:7f:c7:24:f0:55:00:59:e1:57:
9d:79:9a:a1:8b:61:b4:7f:27:af:9f:06:2d:d5:bc:69:a7:1f:
a8:8b:68:6d:e1:a6:98:27:ee:0b:77:08:8c:2d:48:fb:18:42:
be:41:2b:e6:b9:e4:a9:8b:23:92:85:3a:8d:c9:0d:b0:4e:88:
3a:4d:40:20:c1:c9:31:ec:96:3e:4f:6c:de:bd:10:78:a8:66:
b3:bc:bb:8d:3e:9c:28:23:10:89:e1:78:dc:06:fc:5a:a6:69:
90:91:18:c3:8a:88:c5:20:ef:75:3f:dc:e5:61:f8:48:81:e7:
0f:4a:c2:c6:55:1b:e1:fc:70:76:d5:d7:dd:26:7a:d2:44:0e:
30:32:32:41:b8:d0:72:bc:6f:49:61:c3:af:5d:96:95:d7:9e:
9b:0a:47:b5:ee:45:c5:57:af:93:2e:fc:0e:61:11:9a:4b:38:
71:60:9a:08:f4:35:fb:81:a5:db:74:af:de:b7:22:7e:3b:32:
2c:0c:9f:9c:d3:e4:b5:d7:2d:57:af:5a:a1:1f:7c:d2:04:44:
29:fd:f0:ac:d8:10:57:f4:f0:64:2a:aa:16:bc:39:81:82:6e:
1f:67:30:8a:95:43:43:77:d7:37:ab:76:10:26:d7:eb:25:50:
bc:68:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:07 2025 by rpki-client