Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02b05324-2835-37e1-bf94-f83a5093827d.roa
File: 02b05324-2835-37e1-bf94-f83a5093827d.roa (raw, json)
Hash identifier: 4ce/BcRh93Z2vq4usPWypC8HHRLszzhl/dHDCn3Qcps=
Subject key identifier: AE:9B:74:89:9C:3A:B9:37:79:64:67:58:D0:56:4D:B4:46:98:F8:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C110A0A3DCCD8B0B6219600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02b05324-2835-37e1-bf94-f83a5093827d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:0a:0a:3d:cc:d8:b0:b6:21:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a422a2bc-0ece-4045-a853-457abd492c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:6f:a5:45:07:d0:5d:d3:0a:c5:a4:94:f2:
6e:a9:74:9b:7b:b4:51:c2:72:42:24:52:b2:79:8d:
bf:d5:17:e2:a9:0f:81:48:87:b9:dd:10:90:3e:0a:
91:6d:cb:b6:26:39:c8:e5:15:15:a9:a0:2b:6e:76:
07:3f:ce:90:3c:d3:55:31:5d:f3:22:b0:3f:a7:7f:
fc:ba:c8:06:2c:87:74:c7:89:a9:25:75:5b:ca:01:
05:2f:38:02:56:65:3d:1d:b1:f8:d7:a0:8a:07:dc:
0a:77:3b:bd:c1:f2:3e:cd:82:c9:1c:02:fe:99:21:
85:99:50:68:db:ef:7a:01:8c:c3:e1:f8:d5:2e:b4:
a4:2d:4e:84:f4:b1:0f:2b:76:fa:11:b4:54:0b:b9:
62:d2:f7:ab:67:6a:ca:0b:7d:f3:01:ad:2e:11:1b:
53:b9:51:73:22:92:48:89:47:2f:9a:d2:44:c8:f5:
7d:95:ca:a1:21:6b:c5:42:77:cc:26:4a:b4:f7:2f:
39:40:b7:9f:56:62:98:02:6f:98:93:68:90:1f:16:
23:c0:00:7a:ab:cc:c8:19:bd:1a:96:10:a5:87:98:
b7:e7:3d:d9:03:34:6e:2f:73:99:2e:d2:ad:63:03:
9e:11:c6:52:7c:e2:2c:01:ae:23:7c:59:2b:a4:65:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:74:89:9C:3A:B9:37:79:64:67:58:D0:56:4D:B4:46:98:F8:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02b05324-2835-37e1-bf94-f83a5093827d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:0e:9f:d7:fb:46:44:6d:23:b6:f8:9a:df:1a:c8:b5:a1:bd:
63:b6:b4:89:8e:5c:80:0e:b1:09:a4:d1:65:5b:ce:bd:14:2c:
df:84:e9:d6:09:9b:18:a1:e2:78:71:ee:c0:40:25:7f:e1:59:
89:d9:d4:92:b9:14:3c:0c:bf:42:8e:c2:4e:64:b6:83:99:ce:
a3:be:99:09:8a:31:96:c8:9c:12:09:75:6b:56:e1:da:4e:02:
e9:76:61:19:a2:a0:3f:bf:c6:d0:b0:85:39:7a:d7:04:1b:b7:
3f:5c:6d:ca:b5:de:29:fd:b7:38:25:39:d3:f9:01:c3:b8:a8:
a2:c8:a4:2d:3c:a6:1b:7d:fb:92:3b:83:57:6a:63:ce:aa:2a:
c3:ab:27:cb:09:3f:92:eb:06:30:3d:b9:e0:f2:bd:0b:63:c5:
50:9a:1c:14:94:75:04:e9:5e:14:c5:9b:25:69:ed:40:80:c2:
a4:c3:1b:e1:60:c1:cb:66:8f:c9:77:3c:49:85:2a:90:6a:ad:
1f:27:20:35:1f:2d:ab:2f:d6:fd:13:b5:47:cc:ac:4f:88:f8:
4e:12:79:3a:93:f5:27:4e:89:4f:74:b3:b1:ff:02:89:93:38:
22:81:c0:f7:be:b8:05:fd:79:9b:cc:a5:2d:bc:c4:96:96:ec:
f8:75:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:36:51 2025 by rpki-client