Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2696d51-0afa-3dae-87f4-a4106a167734.roa
File: c2696d51-0afa-3dae-87f4-a4106a167734.roa (raw, json)
Hash identifier: Z9XoFaAP5XZsEov0kiY/UQwnrTWWRJA+11q4wUSSl4Y=
Subject key identifier: EE:0A:15:B2:C3:43:7F:E3:1F:2F:52:79:CA:68:28:8A:CA:E0:38:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6D356CCA443B1E4411780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2696d51-0afa-3dae-87f4-a4106a167734.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.37.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:d3:56:cc:a4:43:b1:e4:41:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1f0e995b-aa98-489c-a1f3-1dcafc8bd56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:9b:f8:c5:ad:4b:a9:b1:07:4c:bd:73:16:
5c:31:ae:ee:c5:31:0a:26:f0:cf:d2:2a:c6:ab:61:
3a:eb:32:61:b7:6b:8f:68:1f:1e:03:6e:05:cd:6a:
a6:0c:34:92:f8:92:04:a7:c9:84:e6:99:91:de:fd:
21:c8:51:cf:cf:de:e0:2f:d4:81:21:13:f8:6e:82:
2d:b8:ff:a6:e0:70:31:21:06:cb:02:68:40:75:94:
31:47:71:e8:16:c4:80:78:8e:85:f4:03:f1:b6:1c:
21:27:58:1b:e6:25:0a:6d:f8:ed:24:1d:49:3e:ed:
5a:6c:7c:d1:ea:7f:f2:ea:33:dc:1b:aa:13:2e:8e:
c7:02:b4:78:1f:0e:b4:84:d2:8f:36:1a:b8:8f:4e:
bd:8b:8b:fa:3f:cd:31:90:36:42:e7:21:bd:e8:6c:
85:3f:b0:f3:50:56:fa:68:84:b2:d5:07:08:de:08:
1f:6c:c4:0c:11:14:3e:58:6e:3c:95:d6:60:67:cc:
8b:9b:3a:7a:8a:33:7f:d8:9a:81:e9:21:64:3e:ba:
90:da:7c:62:f6:0b:8b:01:e2:78:3d:17:2f:55:b7:
91:36:30:6e:76:bb:51:43:07:1f:7f:24:70:c7:54:
a5:b2:c7:58:2c:67:bd:ff:44:c4:15:1e:e0:f9:6f:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:15:B2:C3:43:7F:E3:1F:2F:52:79:CA:68:28:8A:CA:E0:38:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2696d51-0afa-3dae-87f4-a4106a167734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.37.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:aa:82:7d:3b:13:27:1b:2b:82:23:61:5f:10:1a:31:8c:5b:
8c:23:56:72:2f:00:bd:ef:63:dc:e4:e6:15:b9:88:da:36:8b:
6b:6d:f1:5e:9b:6c:f8:bc:b8:4a:64:bc:27:6d:97:7d:98:de:
10:8c:d6:17:cb:d1:2e:40:f2:77:f0:35:bd:0a:85:70:09:4c:
9e:6d:33:74:8e:ad:1f:0f:64:7b:73:7d:c2:7e:08:9d:d6:b2:
d2:e1:6a:a3:e1:6c:c3:ca:51:5b:ce:5b:d5:9f:81:7c:a2:e0:
85:d5:7e:ae:69:2c:db:c0:42:50:0d:c7:a7:94:e1:b3:77:d3:
d2:16:7a:eb:71:df:47:04:a4:af:9d:37:03:c0:16:5d:49:bd:
cc:05:3c:88:f5:0c:09:82:84:e8:c2:bd:43:90:1f:e7:f6:ad:
85:e4:03:74:d9:47:cf:0c:33:b7:49:08:79:91:1c:e1:db:63:
73:26:0c:6d:87:97:44:ca:ef:dd:b7:d3:d0:71:ac:3a:fb:59:
a7:a5:67:a7:6c:2d:ff:31:96:36:83:34:2c:e9:50:cb:a6:8c:
90:53:39:bb:94:21:3e:3c:50:8e:9b:8c:7e:20:ed:78:97:2f:
87:8b:be:32:ed:d3:49:c3:bc:86:ab:a2:10:61:1f:2b:a9:19:
6b:95:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:43:35 2025 by rpki-client