Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da643320-bdee-3581-b1ab-1406609c2b6b.roa
File: da643320-bdee-3581-b1ab-1406609c2b6b.roa (raw, json)
Hash identifier: wvem4ONEeEK3DP+9Vnh/EuW9e6KugzkrTgNXEkJ7okY=
Subject key identifier: 7D:54:26:22:57:38:F4:46:27:4A:49:91:DB:F5:1E:F1:30:8E:3C:73
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7EF2ABB8CF46AC23015E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da643320-bdee-3581-b1ab-1406609c2b6b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.255.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:ef:2a:bb:8c:f4:6a:c2:30:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=69b31131-3b14-4f76-825a-59c14e7ac5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:a0:f2:dc:b6:c7:3d:4c:78:bd:14:88:05:
4b:30:bd:4b:ba:38:78:15:2a:b3:04:25:0a:32:de:
b7:f7:08:3a:37:7a:f1:d2:14:7f:64:96:00:b3:bc:
a2:d9:df:21:ab:8d:f2:6b:4a:52:cd:11:72:c9:62:
a8:ff:ac:e3:64:7b:0d:1d:5d:3a:bd:0a:fd:75:b5:
c3:22:59:f8:70:5c:4e:d8:dc:c1:de:2c:04:21:d3:
9f:5f:25:7e:50:35:07:39:8b:14:8d:bc:a7:e0:59:
43:c1:65:07:b9:5f:2d:b9:f1:09:74:f0:a6:1e:de:
20:07:fa:04:27:4b:0b:d7:79:29:b5:7e:b0:fd:53:
a7:19:d1:c9:f2:99:b1:ce:c3:2b:6b:e2:b7:48:ff:
d6:f4:18:3b:91:d5:06:54:0b:fe:ba:10:72:07:fe:
15:ee:c2:dd:9d:7f:91:df:c6:1a:8e:55:94:70:05:
5f:c2:28:47:92:3b:92:3d:f7:40:18:eb:44:7b:e5:
25:08:10:5b:35:7b:8b:b2:b3:cb:9e:0d:ad:58:c2:
a9:89:dd:38:b8:01:46:58:5a:ff:33:f5:43:f9:9e:
39:01:27:8c:a0:77:87:1c:12:87:29:bc:77:f1:bd:
b7:10:a2:3a:33:ad:df:73:6b:34:fd:00:da:63:8d:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:26:22:57:38:F4:46:27:4A:49:91:DB:F5:1E:F1:30:8E:3C:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da643320-bdee-3581-b1ab-1406609c2b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.255.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:35:23:e8:a2:6d:13:6b:ad:6f:12:9e:2b:d2:29:30:5d:9b:
f0:31:77:d9:b7:51:2a:26:41:d7:32:e1:48:77:18:ae:a9:9d:
ff:c8:48:89:64:81:c9:39:6f:9c:5b:9e:4a:08:50:55:21:1b:
f3:09:3c:aa:ff:13:0c:27:98:72:39:e6:03:f3:01:a8:46:03:
66:c2:fc:bd:77:c5:42:54:1c:f9:47:66:75:6e:5d:d9:fe:bb:
53:02:97:8b:72:17:82:45:aa:78:6c:80:f5:82:39:5a:4b:e4:
cd:28:d6:9d:75:90:47:6e:ef:d4:73:bf:27:c0:3a:bd:00:11:
37:32:bc:c1:7e:60:1a:06:68:ab:72:62:95:7a:5a:5d:dc:61:
31:92:b2:f1:02:06:e3:e9:81:98:7a:dd:92:24:89:e1:4e:dc:
ac:53:4d:2c:21:4f:74:0b:4f:85:47:58:d3:3b:30:d9:09:ea:
db:a8:92:53:91:f0:f4:76:2f:75:0f:0a:b5:5c:84:aa:66:cf:
7e:05:7b:1c:07:a6:5b:fa:82:14:ad:8d:e5:7b:47:0c:04:e3:
f7:2f:46:11:c8:d8:81:e5:ad:b3:57:39:78:bc:2a:dd:c8:19:
a5:9a:a9:7d:58:55:fc:89:07:76:47:ca:99:47:46:35:a8:8a:
ea:4f:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:18:05 2025 by rpki-client