Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf0817a8-da3d-32d6-813e-c9335c91f8e2.roa
File: bf0817a8-da3d-32d6-813e-c9335c91f8e2.roa (raw, json)
Hash identifier: G74zroDIgv+qwGVB8NfUGrZQfm7a/P7zJYMO1nPMmL8=
Subject key identifier: 42:9F:2A:9C:9A:F5:78:8C:28:94:A2:CD:3D:28:76:EE:BA:6A:38:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB03EB7CA91AAFCA1F12340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf0817a8-da3d-32d6-813e-c9335c91f8e2.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 73.127.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:3e:b7:ca:91:aa:fc:a1:f1:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b98934e0-527a-4edd-ad9a-6b5bbf3ae8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:9e:a1:a1:45:21:5e:8b:f5:38:1b:23:8e:
27:25:be:15:e6:ee:96:8b:b7:01:33:4d:29:ce:ea:
96:be:06:72:c3:22:cd:ff:57:1a:33:ed:7f:64:fc:
63:d6:26:8b:23:90:49:42:2d:2c:d8:4f:3a:eb:7c:
91:15:c3:d8:ef:3a:be:70:4e:66:99:29:e2:ed:b3:
a7:81:75:eb:b9:77:09:80:76:2c:cd:bf:63:62:6b:
60:8c:97:b6:e9:13:a6:51:a3:94:93:60:3d:97:24:
d7:c4:24:d4:5e:1e:3b:c6:20:33:23:07:e3:d0:41:
d4:42:c5:9e:b2:2a:79:ab:da:00:bb:d5:34:ed:58:
66:f3:e1:98:59:15:53:c6:75:dd:19:06:61:4e:ab:
24:28:8e:98:29:3c:b8:25:f3:45:38:50:d1:d7:10:
61:b2:cc:4d:55:7a:6f:25:72:00:1d:54:93:b6:4d:
6e:ba:02:8a:f8:0e:77:c5:30:bb:b7:24:78:94:b2:
1a:a5:45:a1:09:a1:1b:ab:b2:64:ce:85:d1:4a:be:
4e:f9:a7:d6:06:b1:4b:5b:c2:5d:8e:ca:e5:2b:53:
9d:d3:74:25:d5:0a:1b:95:11:3e:1e:d0:ea:5e:6a:
88:d3:50:71:bf:6a:77:e6:2f:56:89:49:0c:cf:28:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:2A:9C:9A:F5:78:8C:28:94:A2:CD:3D:28:76:EE:BA:6A:38:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf0817a8-da3d-32d6-813e-c9335c91f8e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.127.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:86:dd:83:be:71:d4:ec:03:22:c5:f4:15:11:af:1b:c8:a4:
c9:f7:08:fc:12:d7:36:9f:75:36:7b:e1:c6:b3:72:fc:c8:0b:
6b:4e:77:eb:74:a9:fb:dd:0a:f9:e7:21:df:ab:8a:b4:34:88:
63:17:74:0b:5d:1f:bf:45:ed:4e:cd:7f:2b:a2:c2:aa:73:21:
e9:78:08:04:8c:b9:5b:c3:37:e8:c3:bd:4a:5e:47:bb:1c:50:
31:d4:23:08:67:d6:8f:bf:c4:7f:12:6e:7a:2f:35:d0:7b:f7:
32:70:2b:09:b3:82:3e:59:5e:f8:56:c6:d7:e7:b5:d7:e2:94:
29:f0:4f:ec:f2:9d:a6:7e:04:04:66:16:a9:2c:63:29:28:e7:
55:43:61:73:50:65:e0:5e:0c:94:4b:4f:3c:6b:51:bc:5e:e1:
76:8d:64:64:ec:1e:f0:54:90:8d:71:32:be:16:fb:a8:b7:7e:
fd:60:01:2a:db:ed:e7:85:f2:42:e3:3c:dd:89:bf:69:c2:5a:
5a:5f:7f:6a:15:c1:af:8b:28:09:a6:aa:32:14:b2:12:80:23:
dc:28:dc:89:06:9d:19:16:c1:a1:6f:2b:05:81:c0:41:ed:6d:
4c:54:e7:22:61:e5:47:e8:3b:8c:bf:ec:fd:6a:1c:ff:f4:2c:
0c:26:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:02:40 2025 by rpki-client