Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c23a80-8ff0-399d-a8c4-234d36abc681.roa
File: f4c23a80-8ff0-399d-a8c4-234d36abc681.roa (raw, json)
Hash identifier: nFPkOV09/pLl1/gfAm1qRcpCHJhJgtUksUpXvZIojv0=
Subject key identifier: D5:F7:74:E5:56:4C:1D:98:18:BB:EB:B7:BB:8D:C1:F5:A3:F4:89:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0586A30E9F58CE82D8FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c23a80-8ff0-399d-a8c4-234d36abc681.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.33.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:58:6a:30:e9:f5:8c:e8:2d:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7d77500e-f170-44ed-ba00-cc8723a9e674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:33:53:ed:8e:b6:47:71:ff:92:52:77:a9:
3b:f8:b9:4e:fd:fd:3d:13:9c:b2:d4:5d:19:55:da:
a7:ac:6a:dd:3d:8b:15:fe:e1:6c:19:7e:60:2f:6e:
43:ae:6d:d4:d7:fb:56:5a:d5:19:60:92:c0:d7:39:
95:4f:5e:0e:ef:b5:e7:d1:f9:0a:41:f1:e9:8f:18:
c7:d1:94:91:f7:27:f2:a0:77:7d:a2:4f:c3:9c:1b:
b1:9e:a2:fa:41:85:c5:40:57:e6:65:59:8a:39:5e:
03:22:8a:d6:a3:04:57:dc:b7:3e:54:c9:5f:ed:ed:
db:5b:1f:2c:26:51:13:60:26:97:cd:7d:05:a4:9d:
57:1e:32:fe:20:15:ed:d7:0d:90:96:ae:98:03:ba:
0e:30:d2:03:29:46:1f:c6:6b:a3:94:dd:a7:a0:30:
b0:d4:5c:f9:9b:30:6e:1c:21:17:19:33:66:9f:12:
cc:97:1e:5d:67:09:55:30:e4:e9:c7:e8:80:b5:18:
6c:f1:7d:36:01:5b:f2:b1:09:46:ca:49:ee:d0:89:
d7:0e:ff:ae:ae:76:f6:e3:10:0c:47:7c:5c:dd:19:
bc:9c:3f:b3:1a:24:39:ff:b8:7d:11:78:57:41:18:
ae:d7:3e:47:02:50:33:b8:5f:06:05:33:c4:ef:cb:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:74:E5:56:4C:1D:98:18:BB:EB:B7:BB:8D:C1:F5:A3:F4:89:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c23a80-8ff0-399d-a8c4-234d36abc681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:eb:a6:f6:02:d4:3f:a8:e4:55:a3:ac:ca:e6:2b:85:5f:a7:
db:30:ae:9f:24:17:de:f9:14:9a:dd:91:34:89:b2:10:6a:64:
4f:fb:c0:7e:c6:0a:75:30:21:ce:d2:de:f2:f5:59:fe:d7:22:
13:55:d1:44:6e:c1:48:57:c9:2b:07:7b:13:92:7b:8f:61:0d:
8c:9f:f2:19:43:f0:02:15:9a:7c:0c:b7:89:a2:67:18:f1:75:
7d:08:8a:fe:b1:4f:03:25:5d:07:b6:a9:9c:5c:6e:17:c8:86:
76:77:ea:2e:72:7b:26:f4:13:65:79:9d:6a:d5:05:08:af:c7:
94:69:dc:0d:43:1a:a1:75:21:b8:55:8a:41:ce:e1:bf:5c:b7:
a8:39:05:9e:16:b4:c7:2b:87:5b:77:a6:c5:1f:25:8f:ec:04:
1b:82:ba:fd:3a:b9:e4:fc:3b:31:f0:b0:27:4d:01:d7:e5:93:
5e:d8:67:9e:d0:e2:d0:78:86:ed:a9:07:8d:d5:42:2a:3f:4a:
07:f5:b9:9e:9f:c3:b0:68:5c:5f:d7:83:7f:a4:57:14:59:1f:
1f:57:7f:90:12:1f:6f:2e:7d:87:7d:30:97:b3:70:1b:f1:00:
2d:dd:8e:e3:c5:d4:23:9c:52:ab:ef:41:a8:79:1b:4b:d9:8f:
3c:71:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:11 2025 by rpki-client