Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f502c3b5-b5be-312d-9c8e-153cecaae39d.roa
File: f502c3b5-b5be-312d-9c8e-153cecaae39d.roa (raw, json)
Hash identifier: Yx9i6IM4LG9SPMWztl/SxZYLCgjJfP0CIKdORJRQ0c4=
Subject key identifier: 81:22:90:D4:44:FB:09:93:02:F9:8F:42:46:61:22:DB:BF:90:B5:2B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DC51F397A836024B2F180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f502c3b5-b5be-312d-9c8e-153cecaae39d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 73.65.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:c5:1f:39:7a:83:60:24:b2:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9d51c499-7c63-4a12-babc-00c9dfbb3e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:9a:b2:0e:e3:5f:f3:fd:85:05:ce:ca:a3:
ae:08:f0:5b:65:a8:35:d2:3c:0e:f3:60:1b:fb:8a:
8c:7b:f5:66:c6:49:23:33:1b:89:f1:e7:cb:8c:eb:
73:1f:f3:6f:b7:10:41:c6:d9:a3:2d:8e:6f:f5:0e:
13:28:59:54:80:25:8c:8e:f1:75:3f:eb:20:bc:5c:
72:3e:c4:a2:41:3d:bd:5e:0e:14:e0:ca:66:a9:9f:
d3:52:d2:d3:cb:94:13:b6:c1:75:c0:20:bd:fa:4a:
3c:3d:21:7d:34:ee:6f:e1:c0:e5:b6:65:d6:de:29:
f6:b9:35:4a:e5:b1:de:d3:d5:f0:c6:4d:f0:35:43:
4f:b8:2e:53:76:84:71:be:90:d9:c8:cb:8e:1a:75:
ce:f0:af:c1:fd:4d:42:33:ec:0c:e3:43:b5:dd:f2:
e3:9b:3a:09:25:4f:3a:f7:20:cd:ee:a0:b1:6e:18:
c7:aa:1b:1f:a2:96:75:15:da:7e:3b:8b:63:04:bd:
b8:98:50:f1:1f:b2:8d:0b:5c:c6:77:74:93:da:d0:
63:92:66:59:f0:11:54:02:58:7a:87:77:fa:f5:71:
81:d2:85:5c:5f:b3:12:af:01:6f:64:52:0e:27:15:
78:e3:45:c3:5b:76:89:45:a6:d1:9e:a2:34:da:bb:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:90:D4:44:FB:09:93:02:F9:8F:42:46:61:22:DB:BF:90:B5:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f502c3b5-b5be-312d-9c8e-153cecaae39d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.65.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:44:21:8f:75:bd:7d:e3:0a:cc:00:be:c9:6a:6b:17:c3:2a:
69:5e:62:0a:f3:ea:d9:c0:10:bf:66:67:69:bc:13:85:e8:12:
b3:eb:3c:2a:49:6f:70:0c:dc:e2:70:83:11:54:38:8d:2d:6c:
0d:37:eb:71:1f:1c:2a:19:3b:cf:f0:41:d5:48:18:41:e8:a8:
3a:60:ef:91:06:e7:8a:48:c4:f9:a9:d3:cf:a1:d5:7f:e7:aa:
9a:8f:6c:33:30:26:4c:be:58:af:0f:58:5c:8e:b3:c3:45:4e:
0d:e6:bc:82:1f:50:6d:aa:68:37:a7:7e:44:13:dd:c7:06:b7:
da:28:fc:10:99:9d:06:f8:65:e7:82:88:b4:32:4e:ca:04:3a:
c4:bb:4d:b9:f3:65:27:89:27:e9:34:8c:a7:d0:bc:1a:57:5b:
df:0c:da:cf:68:7b:ad:ee:fd:c6:93:47:0a:2f:a9:6e:a1:34:
21:06:61:3d:43:4b:ae:5c:6b:86:f4:61:13:6e:72:cc:86:98:
6c:85:e0:19:26:6b:47:56:75:a0:c0:05:7e:9b:69:cd:83:94:
ee:58:72:c0:5c:c6:ff:65:23:d1:3b:63:7c:7a:87:12:48:34:
e7:22:48:83:3e:58:c0:f8:2f:18:48:9a:44:5b:1f:06:4b:90:
a9:b0:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:34 2025 by rpki-client