Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfd05f0e-90fd-3877-9c00-63a4cf5d8f83.roa
File: dfd05f0e-90fd-3877-9c00-63a4cf5d8f83.roa (raw, json)
Hash identifier: PM7qeg6mbWQcNtr7qDr4PntXO0ADhxxVhTjZG+7+zUA=
Subject key identifier: 98:F2:96:D6:CE:06:D2:B1:F4:C2:83:EB:F8:21:43:6E:B3:71:E6:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEA754C74A67CC6A002E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfd05f0e-90fd-3877-9c00-63a4cf5d8f83.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 73.20.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:a7:54:c7:4a:67:cc:6a:00:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=54624e79-80c2-4b25-9bc8-0148c4a3efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:50:8d:21:82:36:5c:c0:5f:eb:cb:1d:b9:
be:46:80:20:4f:3e:e6:07:1c:96:e5:ee:24:7f:eb:
aa:45:29:5d:f6:58:9f:b8:87:05:87:dc:dc:dc:2c:
d5:aa:54:8c:64:d0:59:4c:6b:9b:10:73:ee:16:f9:
aa:b8:fc:a2:8f:e3:03:87:8c:4b:38:9a:25:6b:7c:
c9:eb:cc:99:6e:84:b7:f2:68:79:ad:f0:fe:4c:5c:
6f:b4:bd:28:c8:8b:c7:0e:55:86:60:58:a8:2c:4e:
f8:b0:be:3c:68:52:cc:bd:85:fb:34:b8:18:56:b7:
7c:94:51:03:dd:f9:ae:10:0f:cb:75:a6:76:2c:1e:
af:dd:7f:d7:8d:e0:1a:fb:24:e1:62:c4:a3:6c:52:
a2:f2:31:07:84:fb:6b:d8:4c:ad:8b:e7:0b:e1:e2:
c2:fa:63:3e:68:7a:1e:01:5f:34:83:f3:55:97:ef:
2e:87:b3:c4:52:8a:d7:34:ed:0c:00:76:a8:ea:c0:
2c:ad:9f:ce:de:a4:fd:de:85:b1:98:ae:68:4b:98:
19:d6:f3:aa:1a:03:ad:45:97:18:61:58:fc:b9:09:
68:47:17:4b:a1:b3:88:d4:55:40:88:bc:3e:91:b9:
bd:44:d2:a7:cc:94:60:d2:ba:80:eb:b0:5b:ce:64:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F2:96:D6:CE:06:D2:B1:F4:C2:83:EB:F8:21:43:6E:B3:71:E6:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfd05f0e-90fd-3877-9c00-63a4cf5d8f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.20.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e3:ef:a5:a1:29:95:c9:75:f4:82:9c:50:5c:e6:4a:c5:5f:
04:18:e7:4b:d4:6a:89:3f:8f:13:e0:21:6e:95:cd:ce:35:65:
fc:2a:73:3e:c7:6e:dc:9e:63:36:b3:22:8e:75:d9:13:71:5a:
1f:74:ff:be:c6:c6:24:df:26:1b:07:b2:e2:75:dc:86:24:73:
0a:18:82:4a:0d:58:45:39:f7:ad:84:d9:a9:7e:fd:b9:36:ee:
f5:fa:64:c8:43:25:c1:19:25:5e:bb:4e:87:b1:21:bc:be:c6:
74:73:ca:54:77:ad:db:c1:54:2b:93:b2:88:13:8a:9f:3a:ce:
38:e7:6c:e9:92:67:55:42:55:d3:f9:02:d3:30:e5:41:08:d5:
59:d5:bb:c0:65:fa:27:66:c6:3b:60:0d:da:2d:ec:f2:f9:aa:
37:06:5c:af:80:a5:2e:04:dc:ad:33:7e:f5:43:90:5e:e3:19:
29:6c:e5:1b:f4:ba:89:07:84:35:7f:02:54:3f:1b:95:c9:ca:
1f:69:e9:bd:1b:9b:07:45:c7:1b:eb:7f:29:6c:0e:d2:03:48:
d2:a3:97:52:d9:b2:4c:01:bf:d2:44:87:ab:13:81:d2:e5:cf:
21:94:50:d2:8c:7c:77:2c:24:09:83:6d:55:b9:f1:f6:2e:c5:
4c:f5:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:36:00 2025 by rpki-client