Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5e9230-0a56-36fe-a38a-5489d80fd9fa.roa
File: ff5e9230-0a56-36fe-a38a-5489d80fd9fa.roa (raw, json)
Hash identifier: nqCo+XYM/AK7cQa7wjg8h+6YFEqnafgEGM9CxBJ6r5o=
Subject key identifier: DD:17:61:ED:12:EF:C2:AD:6B:3D:48:C4:55:E9:B3:0F:E0:91:65:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1308F876A588204BA2C70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5e9230-0a56-36fe-a38a-5489d80fd9fa.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.58.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:30:8f:87:6a:58:82:04:ba:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=1d54dd98-500b-4d0e-a96c-d36c7b477f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:f0:88:50:f4:a4:d2:38:78:83:94:ca:72:
62:72:93:c4:7c:66:91:a1:74:c8:f5:a6:46:21:c3:
4f:f0:9c:ed:4e:45:05:d4:f0:a1:1e:4d:b5:0b:86:
1d:35:8d:f6:2a:9e:f8:a4:01:15:50:e0:46:fb:4b:
98:b1:9f:6b:ae:d1:1b:76:03:c5:2f:9a:51:36:4b:
00:a4:e2:b6:fe:c2:c0:5f:4c:af:ad:a5:b7:d8:bd:
45:e1:fa:2b:d6:0c:8f:f4:61:aa:74:4f:4a:ec:be:
9f:e9:a5:66:f9:33:d0:e6:e2:01:fe:88:e2:c6:07:
6f:e2:06:80:62:1b:44:18:bb:c2:8c:8f:12:65:93:
2e:3a:73:e9:61:8e:15:5e:e3:c2:65:3e:3f:3f:e6:
ea:65:70:5f:de:85:46:28:a3:5b:b2:b5:ce:0d:27:
9f:04:a2:21:10:93:be:5d:c2:e0:45:e2:11:84:b4:
11:5b:78:19:70:c1:7e:ab:bf:b3:55:09:da:dd:0c:
5c:5e:47:2d:38:dc:19:d0:d4:d1:d6:8d:83:5e:77:
38:41:b4:77:02:d6:94:e0:2d:8f:5e:0c:21:72:77:
f0:dc:51:62:06:24:1a:7b:10:a5:da:79:44:56:9e:
78:90:0e:26:a2:4b:dd:3a:f9:34:9f:57:9b:b4:f6:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:61:ED:12:EF:C2:AD:6B:3D:48:C4:55:E9:B3:0F:E0:91:65:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5e9230-0a56-36fe-a38a-5489d80fd9fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.58.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:1b:18:c9:00:f6:a4:87:0b:3d:0a:71:48:46:92:8e:fd:6f:
e3:4a:e3:33:df:e8:ef:e9:61:5a:e4:cd:d5:59:e9:7e:67:51:
1a:8f:2b:c1:bc:dd:f8:ea:46:14:1e:34:78:ed:e3:6f:9a:8c:
85:e9:13:9d:89:5d:67:62:52:77:42:8f:78:c1:ae:83:c7:bb:
0a:58:0f:6a:9d:de:ee:5e:21:4f:a8:44:e4:ee:e0:09:ca:30:
fc:d0:38:e2:2e:35:09:95:bd:e9:06:74:3a:ec:d6:1c:c5:66:
2b:f8:d6:ad:b5:a4:88:ac:40:1b:b8:a0:4c:63:8d:6f:4d:53:
b1:1b:9d:00:29:b3:75:36:61:df:ab:0f:eb:75:7a:00:53:54:
1d:e4:95:68:30:ee:a2:f8:fe:ff:d6:03:79:0b:5c:f8:b3:b0:
93:04:68:dc:e0:20:7f:68:29:05:f1:f4:cc:9e:2d:c6:35:4a:
44:c6:17:37:b0:2d:07:6c:05:76:22:0d:e0:4b:93:b0:cc:fc:
89:fa:5c:aa:94:28:03:5b:6f:e2:b1:df:fd:52:5f:94:07:06:
a4:fb:d7:83:7d:d9:d3:85:1e:39:53:b9:93:84:9a:d5:ce:25:
79:0a:3d:d3:4b:88:bb:f2:93:72:d6:81:85:6a:00:fd:65:c6:
69:2c:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:39 2025 by rpki-client