Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/267f78f5-b8d2-3246-bcc9-500a9d56c657.roa
File: 267f78f5-b8d2-3246-bcc9-500a9d56c657.roa (raw, json)
Hash identifier: OCfo3+TD+iNSrfLQpsSUIuA/zHUBOCdB52syL7w7UCQ=
Subject key identifier: F2:FE:03:E1:4A:3C:42:D0:1B:0A:D0:FF:72:C6:5A:8A:B6:B1:41:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6D7B9C1C2BD4EAA81C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/267f78f5-b8d2-3246-bcc9-500a9d56c657.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.144.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:6d:7b:9c:1c:2b:d4:ea:a8:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2952ab21-c9a4-4868-9ab4-4903d40b1599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:61:2a:44:68:2c:1f:8a:6c:bd:84:3c:74:
2a:8c:1e:37:c9:09:6d:bf:01:b3:98:41:6c:ff:07:
cb:76:c3:1e:22:8c:b0:0f:41:7d:4b:fe:0a:d6:1b:
17:0f:94:f4:cc:3f:d7:74:72:54:00:8f:60:36:cb:
46:06:43:aa:2d:1c:16:5d:5c:3a:69:f9:48:09:ae:
2f:32:ea:6f:a4:ab:f8:52:9d:d7:2e:3e:3f:36:3d:
17:1b:75:bf:b1:3d:03:ea:cf:5b:04:aa:37:2d:8a:
e7:d0:f4:8a:b1:62:c5:ab:59:0d:71:bf:6a:cf:36:
33:8d:c0:c9:56:38:d8:14:3f:a6:83:a5:ae:25:ba:
6c:0f:95:71:49:4d:ff:76:08:7d:e0:e2:6b:65:c9:
da:03:0d:f8:f8:02:62:79:5a:82:5b:58:62:f6:31:
94:7c:89:d5:c4:87:41:3a:b9:e8:6f:6d:a1:ef:c6:
bd:4b:87:b3:fa:23:3a:ad:82:d1:4c:8f:b0:d0:2c:
98:7f:37:cb:e6:52:a3:7a:d6:72:5f:8a:d0:40:64:
69:3b:09:dc:a1:85:33:02:c8:f9:6c:68:6f:90:7a:
39:1b:8c:01:43:41:d6:cd:64:30:12:31:1c:34:6e:
eb:70:39:94:02:90:65:f1:a3:37:35:a7:3f:97:3e:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:03:E1:4A:3C:42:D0:1B:0A:D0:FF:72:C6:5A:8A:B6:B1:41:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/267f78f5-b8d2-3246-bcc9-500a9d56c657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.144.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e7:d6:e7:c8:e8:56:4e:e6:72:7b:52:f1:4d:af:1a:08:2b:
aa:74:7f:0e:75:ed:72:b7:1c:e6:58:1d:c8:f5:61:6b:46:20:
f3:87:27:b2:01:24:bc:30:33:35:45:4c:37:3e:df:99:aa:b4:
ea:e3:ed:d1:58:57:86:49:85:c5:a2:76:1a:91:36:6f:ca:f6:
fb:86:44:e9:c9:e8:86:ed:f0:f4:4e:51:5b:58:e0:71:84:23:
0f:6c:24:09:46:17:cd:ee:5b:0d:f4:cf:b5:31:88:1b:bc:8d:
06:be:d9:2f:33:f6:d5:ce:3b:c9:f1:da:33:03:b0:d3:f2:c0:
ac:8e:7c:02:d0:1f:e0:07:ae:70:6b:c3:2b:ae:ec:97:45:33:
a5:9a:6d:e7:1b:d3:94:72:1c:a2:2f:52:64:ea:c0:92:01:b3:
b0:02:81:02:0f:a3:4e:62:9d:60:df:fc:6e:b1:a2:e7:1b:54:
15:aa:e9:77:cc:dd:24:dd:fe:53:55:7a:8f:5b:bf:12:87:0d:
c0:b6:eb:cc:35:24:6d:ab:22:fc:47:84:18:b8:42:66:45:b1:
ee:9b:4c:6d:e1:85:79:80:41:2e:7f:6e:77:c2:92:55:3a:ab:
63:ff:89:80:4d:a1:42:0c:9b:23:0b:0a:43:02:77:ad:c5:20:
da:dd:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:08 2025 by rpki-client