Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b5b29cd-b0b7-32e4-b642-17ff5f62cfb3.roa
File: 1b5b29cd-b0b7-32e4-b642-17ff5f62cfb3.roa (raw, json)
Hash identifier: eWDe230wcaVl822n1ZIHmVrIvVbRdArx0C20euz5upU=
Subject key identifier: F1:66:82:1C:87:E9:BB:62:06:10:85:F0:D5:EB:80:5D:F4:BD:FF:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143BA63BECA835AAF60EB880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b5b29cd-b0b7-32e4-b642-17ff5f62cfb3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.206.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:a6:3b:ec:a8:35:aa:f6:0e:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b9433527-2349-4e58-b6ea-c0d65d7d9f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:f1:7f:22:c3:ff:c5:41:11:5f:7e:b5:63:
43:24:55:9d:c7:36:19:da:fa:99:25:d6:da:df:8a:
40:b6:94:d2:ac:a3:ce:09:08:62:ed:48:27:b0:44:
7e:d2:9a:8c:44:76:c2:fd:41:3c:57:8e:bd:1e:bd:
55:75:5d:22:f2:d7:27:29:bb:1e:9e:f9:9f:c4:cf:
1a:b2:0e:e3:9d:0a:de:77:dc:7e:7f:ba:d1:ee:a8:
ec:e4:7a:83:f0:1b:6e:c8:19:cf:c2:ff:2c:7c:44:
db:d4:c3:6c:50:03:78:76:45:bd:e8:ed:06:7f:9b:
fa:e2:f9:72:69:04:63:87:54:ba:29:12:bc:13:cf:
9a:0e:cc:fb:a0:3d:72:6d:60:37:39:f5:2a:4a:47:
fb:c7:bf:02:6e:cb:27:ef:04:a8:a3:3e:73:66:83:
66:04:7f:ac:0e:53:48:d1:db:ad:b4:80:13:40:53:
15:5e:bd:37:5f:97:4a:2d:57:28:5c:ad:fc:64:17:
70:6d:55:39:44:b9:77:07:23:5f:44:8e:11:ca:93:
84:72:b9:25:51:d2:8c:33:00:08:ad:5f:e7:eb:12:
f1:92:92:23:a9:7e:44:9f:f2:52:b6:53:97:3a:f8:
44:15:ce:7c:a3:14:60:a6:47:3c:ff:81:3f:39:43:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:82:1C:87:E9:BB:62:06:10:85:F0:D5:EB:80:5D:F4:BD:FF:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b5b29cd-b0b7-32e4-b642-17ff5f62cfb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.206.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:7c:19:60:93:a8:5c:9e:fe:9e:17:90:ae:53:af:90:49:fd:
a8:39:f8:89:11:c9:90:0f:a7:89:e0:e9:e1:ec:b0:1f:34:22:
56:96:df:df:5b:0b:e4:f2:cb:a7:63:fc:aa:91:f2:68:fc:7c:
49:76:dc:9c:10:6b:46:0e:49:58:60:55:64:58:25:38:69:19:
fa:d7:b4:18:84:c4:43:d1:66:d1:78:5b:f5:de:e6:84:8d:4c:
e9:b0:ab:d6:60:41:f8:b1:97:8e:f0:89:23:27:ee:07:f1:18:
ad:1b:39:ef:82:33:42:29:e7:75:5d:93:65:e1:20:94:af:2c:
9d:ef:86:f6:43:54:20:47:39:a0:71:4a:d9:03:ba:f3:d1:ac:
99:00:ff:e7:5d:58:ca:1b:0c:46:35:dd:8b:b3:ee:ea:4b:a9:
8c:93:f2:38:f1:f6:9c:17:45:17:3f:54:59:a2:f4:99:e4:1b:
cd:47:bb:a9:af:7a:6d:22:a3:56:8e:ac:d6:3a:04:d0:79:72:
fb:8e:00:cb:93:bd:ce:fe:53:3f:b4:f5:33:86:c1:70:f4:ab:
ff:a8:7e:56:dd:d9:39:65:c1:cc:0c:d2:e3:ba:d8:ef:5b:ef:
92:33:31:80:29:e3:40:d7:f5:0a:33:86:71:23:e8:a9:4f:d3:
88:45:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:20 2025 by rpki-client