Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23eab088-8cd0-3ad0-bec3-b1192bc426f5.roa
File: 23eab088-8cd0-3ad0-bec3-b1192bc426f5.roa (raw, json)
Hash identifier: 3TF8wHOWGAg1wDCyRiUEGLJpaFMvo9hMV34MwaU8ht8=
Subject key identifier: A7:85:F3:10:71:61:D6:AE:E4:C2:20:45:C7:B1:C2:7B:5E:18:0F:CF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E60C0A36570F61F4DE5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23eab088-8cd0-3ad0-bec3-b1192bc426f5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.234.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:60:c0:a3:65:70:f6:1f:4d:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=20db2a7f-b5ea-40cb-9b0a-ae21ee9f4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:2d:74:31:79:74:03:34:1b:66:1b:08:61:
b9:17:3a:64:58:fb:21:3a:8b:f6:8f:32:61:fb:12:
12:2e:ae:de:2c:8c:0c:91:43:7c:24:56:29:1b:dd:
3c:cf:28:95:7f:93:82:2f:9d:25:53:c1:74:a8:14:
dd:24:61:88:f5:fb:37:ff:41:62:82:b3:18:3c:87:
a2:75:c5:dd:30:0e:7d:53:3f:1f:ad:8c:7d:ca:6e:
4d:a9:35:7a:b0:70:66:4f:cd:d1:12:27:91:0c:e6:
d8:8a:7a:8c:97:f0:21:f2:91:a5:bb:39:63:4e:f0:
87:b6:bf:1a:1e:c4:7b:22:5a:01:c1:69:6d:d1:2e:
6c:43:d9:5d:ac:ed:0f:2b:83:e8:0b:bb:7d:be:f5:
74:c4:1b:19:40:87:18:04:d1:ad:db:5c:12:65:b4:
c2:46:e4:5b:83:bd:ce:63:c8:bc:47:5a:98:d5:4b:
47:44:f0:95:75:2d:0d:3b:00:81:bf:fc:23:f8:1b:
7d:0e:04:61:22:bb:73:a4:1d:10:9e:d1:6d:f5:fe:
c8:28:e4:55:d3:01:cd:27:ea:b3:fb:cd:9a:f5:38:
fd:54:fe:47:f7:61:76:ec:d9:21:d5:7f:6f:51:ab:
0b:c7:84:0d:be:e7:77:7a:26:e9:ad:b7:0d:e2:c0:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:F3:10:71:61:D6:AE:E4:C2:20:45:C7:B1:C2:7B:5E:18:0F:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23eab088-8cd0-3ad0-bec3-b1192bc426f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.234.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:a4:d9:4f:73:86:79:90:ef:b2:a3:b9:b7:0c:a1:e1:c1:e9:
8b:2f:63:ec:c1:a9:93:50:f1:c8:ed:73:48:bf:5e:a5:b9:71:
51:a3:f4:6d:1c:d1:4d:d2:71:e2:a2:e5:35:6c:70:07:55:d9:
43:46:bd:c9:84:b4:2a:7d:42:bd:69:ff:a4:ea:91:66:be:5e:
bd:59:ff:4f:e7:4b:a6:62:e2:08:6a:67:ab:7a:f9:7b:11:2e:
00:f8:e1:12:37:39:a2:a3:81:ae:1e:d1:5a:0f:f2:0f:b6:89:
3e:cf:9d:cc:63:aa:b3:21:98:d2:08:b9:db:41:5c:87:92:f7:
d3:70:2d:8b:e8:52:71:45:56:cc:15:9b:d8:52:ac:6a:d2:ae:
02:d8:a9:ac:aa:ac:90:26:0a:8c:f6:58:e1:77:96:91:01:1b:
66:06:b4:7f:8b:d6:d5:c5:aa:5c:2e:4a:a0:58:2c:94:63:d0:
34:40:a7:e6:44:cc:1a:63:8e:0b:6b:a8:24:4f:2e:61:ba:8b:
71:fe:ec:74:50:38:e3:a5:e1:95:ea:44:98:3c:6d:32:bf:e5:
5c:56:99:30:94:0f:e0:6f:7d:86:0d:c9:6f:57:c1:6e:f5:fa:
d0:2d:ba:75:80:51:8b:ba:f3:f5:43:cd:5a:56:39:fb:8f:6a:
b6:73:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client