Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c90d8f9d-9cb6-3f06-93c0-3fc50262ebb3.roa
File: c90d8f9d-9cb6-3f06-93c0-3fc50262ebb3.roa (raw, json)
Hash identifier: woZa+HdZVcyf7yvgR7RCAQDeyKcK/MSOYHxUpLg/eZo=
Subject key identifier: 2D:82:F1:7B:B8:EE:79:2B:7A:BC:FC:8A:33:A4:91:F0:F3:CA:E3:1E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8432E9EBE298B1F4D1C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c90d8f9d-9cb6-3f06-93c0-3fc50262ebb3.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.96.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:43:2e:9e:be:29:8b:1f:4d:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=aa368e68-99ae-4a58-ace0-d78fbc80612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:68:41:07:08:b4:98:b4:42:9d:fa:12:4f:
df:3e:e7:61:f3:0a:4e:d6:63:f9:27:ab:6c:49:1e:
14:3e:27:ed:10:0e:39:f4:69:95:28:d8:3b:52:77:
b1:31:f5:c2:46:1f:e2:15:63:93:6c:8d:22:41:a2:
3a:34:39:d9:21:59:10:4e:a6:21:a9:8d:12:56:49:
30:a6:0f:32:76:d8:0f:94:4a:f2:42:6f:4f:99:d9:
5c:91:3c:3f:2a:88:0f:9c:52:78:7d:65:e3:43:72:
8b:a8:7a:fd:26:74:5a:03:61:f0:55:42:ea:aa:bb:
dd:ed:ef:06:be:90:50:85:28:32:36:18:0d:66:43:
84:3e:b6:d1:7a:dd:f1:73:02:8c:0f:2f:40:12:ca:
26:43:16:2f:60:4f:30:ad:86:ce:e0:7f:57:f7:db:
87:46:48:6e:05:08:d5:6a:84:a5:45:ed:a9:9a:4d:
df:39:5b:cc:5e:9e:cd:87:95:47:0d:b5:0b:40:75:
71:6d:5e:2e:ee:1d:2b:37:e1:0c:02:0f:dd:14:14:
ac:20:8f:52:86:93:6a:b9:f6:14:86:06:71:52:a7:
d2:25:47:16:b9:a3:ca:07:ff:a3:a0:89:aa:13:50:
2e:fb:0f:7e:c3:26:a1:53:a6:f0:19:80:6b:ad:da:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:F1:7B:B8:EE:79:2B:7A:BC:FC:8A:33:A4:91:F0:F3:CA:E3:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c90d8f9d-9cb6-3f06-93c0-3fc50262ebb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:08:31:d9:59:ee:bd:f7:22:31:b4:42:8f:e7:47:4d:b8:a4:
b7:82:a6:34:a0:80:f2:9e:59:4c:2b:ad:d2:6e:d5:15:5c:7d:
50:d4:e3:6c:18:c5:9f:ea:5c:de:48:98:84:a9:11:0d:fa:77:
f6:d0:17:5d:d9:a1:ef:2d:64:e1:33:b1:87:f0:a0:24:da:55:
88:f8:55:a2:9a:2f:0d:af:6b:3e:cf:11:2b:94:ac:86:d2:d4:
67:56:5e:f2:bd:d0:76:e8:d2:c9:7f:b2:02:7d:3d:08:a9:44:
e2:1e:43:45:8a:eb:e1:3e:18:68:a9:96:aa:19:19:8d:dc:46:
fe:ee:a1:bc:bd:cc:b3:48:1e:a9:f5:fb:38:88:4e:91:e4:6a:
5f:42:32:5d:25:df:d0:67:ff:5a:b4:e2:46:8d:cc:d8:24:02:
ea:1f:12:ce:a0:b1:74:39:f5:41:6c:6c:e6:83:62:5a:5f:a8:
36:3e:4c:44:ee:86:49:de:a9:7f:9a:f0:67:39:81:54:16:79:
87:96:8e:0d:bb:00:1a:85:6a:6a:a6:6b:2e:97:7e:ed:27:f6:
5f:df:68:46:f8:f2:9f:f6:72:e5:1a:f0:94:56:a0:2c:19:78:
fb:ee:77:ae:7c:e8:1b:c1:61:cb:5a:06:16:e9:ec:59:d8:b0:
7b:a5:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:59:34 2025 by rpki-client