Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25aac4f4-7a0f-34b7-b5cc-992b76cd0931.roa
File: 25aac4f4-7a0f-34b7-b5cc-992b76cd0931.roa (raw, json)
Hash identifier: de6DxKkXkYXTwTon9PdAotNzi+/7mue3btsLWcHs15Y=
Subject key identifier: D0:C9:12:16:DB:0B:09:C3:A3:90:2E:81:2D:80:69:6E:61:57:37:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1105F59B2B68E33E0AAB60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25aac4f4-7a0f-34b7-b5cc-992b76cd0931.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.208.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:05:f5:9b:2b:68:e3:3e:0a:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=984f4d87-3212-4044-8094-f1c7cdfc524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:b1:37:9a:da:96:15:c5:c2:df:14:29:df:
fb:f5:86:a0:bd:1a:27:55:51:6f:91:95:56:80:6d:
24:da:6f:6e:ad:d4:9d:39:e8:06:a9:81:f9:de:c4:
0d:48:92:4b:87:6c:7e:d2:7e:84:34:a2:49:de:a1:
d8:76:37:bc:d7:ab:23:0f:5d:dd:5d:b1:10:c7:dd:
23:35:93:24:fa:94:80:40:8a:b2:10:74:69:14:c1:
99:02:5d:8d:bd:26:d5:5f:3d:94:32:bf:b1:a2:a2:
bd:ff:61:f6:a4:06:ab:19:a2:a3:d0:9e:de:e1:2a:
b4:f9:4a:ed:de:f3:50:61:e0:62:19:32:07:7a:b8:
64:e3:2e:2d:ef:f8:75:bb:79:a4:10:e0:75:76:e0:
80:b7:32:ba:d9:d4:1a:55:69:9a:4e:be:a1:19:98:
cd:cd:dd:a3:a1:e9:99:64:d9:dd:cc:a2:7a:a9:b9:
e9:68:f3:27:ce:85:eb:57:dd:6d:0d:40:6a:db:57:
3c:84:fd:62:c2:d1:88:f7:9d:ce:49:1b:dc:fd:a1:
d1:f2:5b:0b:e1:46:db:23:37:da:d1:ce:c7:5b:8a:
4f:5f:14:a7:a3:79:47:53:76:60:49:6d:7c:95:3f:
81:df:ed:ab:fe:a9:d2:f0:c6:9e:5f:b1:ab:a0:e2:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:12:16:DB:0B:09:C3:A3:90:2E:81:2D:80:69:6E:61:57:37:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25aac4f4-7a0f-34b7-b5cc-992b76cd0931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.208.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:29:76:ce:24:62:d4:c6:7c:75:19:14:5e:86:45:b2:22:be:
82:dd:d8:a9:7d:3c:74:2b:9a:90:da:1e:60:65:98:a0:cc:aa:
bc:16:0f:0f:0c:88:b7:d3:ff:20:9f:1e:bf:0f:6f:47:f0:09:
19:ef:5a:f7:08:09:ae:9f:17:d7:16:ed:f4:22:2c:4e:a3:28:
c8:d0:56:10:a9:1c:d2:6b:32:a4:19:bd:fe:0e:bd:e3:08:8d:
16:81:3a:2c:4f:c0:6d:08:22:da:41:0f:b0:0e:61:71:e6:95:
26:63:96:b2:f5:b3:87:a4:9b:f8:53:cb:d3:6e:8d:78:4e:8e:
71:eb:7a:34:08:11:74:b9:b0:27:2f:3b:9f:e8:e3:c7:df:69:
df:6a:b9:6e:64:bd:36:75:b4:d6:f5:a6:e4:b9:96:f1:15:44:
6f:62:e0:8b:e2:cc:2e:84:82:76:7b:7c:69:b2:5d:e3:3a:c6:
46:55:7d:4e:68:75:bb:ee:a9:93:a9:de:d6:81:ac:40:39:40:
2c:76:c6:01:ec:9d:8b:d0:a3:8c:e2:e6:b7:46:a1:0a:75:3a:
50:a6:c2:27:4b:25:08:9c:ff:4b:05:43:fa:bb:cd:a6:45:55:
05:92:fa:59:8b:e7:03:57:e7:77:9c:d1:05:b7:db:26:ae:96:
18:f9:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:42 2025 by rpki-client