Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c86c76ea-8d1b-39a1-b5e4-231ae6ea7b08.roa
File: c86c76ea-8d1b-39a1-b5e4-231ae6ea7b08.roa (raw, json)
Hash identifier: dc6mIfIpxYmzctAl3Zhx2Tgw+NjVax/u0dPZuGx4E2c=
Subject key identifier: DE:1A:BB:F8:7D:EC:EA:32:01:F2:36:FB:EB:3D:6F:D4:99:A2:1B:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CF6B3BD761602CA826340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c86c76ea-8d1b-39a1-b5e4-231ae6ea7b08.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.88.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:f6:b3:bd:76:16:02:ca:82:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=301b15e8-2e47-4ad4-a253-490ca4cc998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:09:d9:39:96:55:3e:8f:bd:17:a9:96:b9:
98:59:e9:2f:7f:09:09:56:4b:ed:df:41:1f:04:71:
1a:0e:59:a3:e2:05:a7:9f:47:a1:56:b8:d7:9a:79:
57:08:22:38:ff:93:f1:02:c4:1f:83:1d:55:ec:57:
e7:11:48:9f:29:cf:35:4e:fb:8a:46:52:cb:1e:bf:
f3:bc:5c:6d:5a:cd:78:8e:ab:f6:e3:8a:c6:77:7b:
eb:f2:47:b1:97:9a:5c:d6:1b:3e:43:c3:a1:bc:cb:
ce:82:97:15:e5:19:31:46:5e:ca:f3:05:9c:f6:7c:
21:d2:30:44:b5:51:e3:89:9f:1d:7f:14:59:db:d6:
d6:90:7d:f3:f3:c2:94:3e:c3:d9:2d:3d:ac:a7:c9:
14:ba:c1:9c:55:22:4a:6d:e8:8a:b3:84:fb:f7:38:
9d:70:32:b0:ce:68:d0:47:ae:f4:05:4c:3c:f0:dd:
3e:e8:5a:4d:64:e4:fe:0d:a3:f5:a0:5d:17:c4:ee:
c1:b9:5b:65:52:00:b6:76:39:0d:43:60:78:70:25:
40:c0:3b:c8:00:e9:3b:3b:b9:11:05:c4:1e:c5:9a:
17:d7:fc:de:e3:9d:b1:7d:ab:93:f4:1a:22:bd:be:
da:15:2b:ac:4e:b6:2d:2e:08:c9:e9:c3:89:fd:ed:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1A:BB:F8:7D:EC:EA:32:01:F2:36:FB:EB:3D:6F:D4:99:A2:1B:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c86c76ea-8d1b-39a1-b5e4-231ae6ea7b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.88.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:eb:d3:cf:55:a3:f5:26:6f:0d:ef:e1:84:0e:92:78:42:1c:
e6:21:29:84:15:ae:d8:cb:e4:92:f0:45:6d:95:df:92:8b:92:
e0:fe:af:7e:10:9a:4d:47:0c:aa:c4:68:8d:dc:d2:a1:5a:12:
a2:89:4b:8f:8a:d3:0e:ac:8f:99:21:9c:5c:ae:43:db:18:b3:
fa:27:1a:d7:3b:66:20:1e:73:fe:9a:17:43:c2:8b:13:46:05:
04:11:2f:e7:69:58:e0:4e:d0:a2:35:20:db:25:82:53:aa:ae:
45:69:b3:ff:80:e1:ba:9a:dc:09:80:1b:1e:7b:81:a4:fc:54:
8a:98:13:0a:b1:b9:71:9b:72:f2:9d:a3:4d:a5:3d:0d:27:a5:
22:26:97:18:ab:45:ed:bf:3e:80:96:3f:96:ca:b8:c9:60:ba:
8d:05:f3:9f:3c:4c:2c:c6:a6:ed:d7:dc:3c:25:6d:cf:17:e8:
db:b9:c9:73:7e:a3:2e:87:7f:46:78:b4:5e:43:e4:5f:6f:64:
2c:f6:ce:11:98:7b:7a:6e:e2:d8:57:a8:38:af:31:28:52:03:
35:51:8a:ed:c9:07:9e:73:09:46:3a:aa:31:9e:39:46:47:94:
30:1b:44:68:bb:69:ae:73:6c:aa:c8:fb:7d:bc:eb:2b:0b:3f:
f7:b2:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:45 2025 by rpki-client