Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27997bf4-d640-3f1e-848a-a02e0a2f003a.roa
File: 27997bf4-d640-3f1e-848a-a02e0a2f003a.roa (raw, json)
Hash identifier: nfKJMWVY1I7OxcaEa+WDXtajC/XtaFp/m1gSn6v4a7I=
Subject key identifier: 0D:AA:87:74:94:AB:EC:15:1D:6C:EA:B0:08:E0:C3:43:FD:07:B5:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AAA47A15C96C51EEE6E08
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27997bf4-d640-3f1e-848a-a02e0a2f003a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.240.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:aa:47:a1:5c:96:c5:1e:ee:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0380c9b3-2454-420d-8a81-e07252885c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:74:65:92:92:18:1b:af:13:86:b7:3e:ea:
8a:1e:f2:b3:3a:71:5b:62:6f:3d:23:78:f9:43:ad:
ca:38:a7:64:b0:ee:71:38:3a:69:32:2f:3c:db:da:
1c:1d:02:2b:6c:6a:f5:26:94:5f:6c:e2:70:a8:d7:
a2:62:cf:3d:7d:b9:64:5b:1b:80:e7:fe:c0:d5:32:
7c:b0:28:36:95:d1:d1:a2:65:68:5b:0c:73:83:f7:
5c:5d:e2:94:f7:26:cc:b2:a3:a3:14:9d:2d:d9:89:
17:8b:39:3b:08:fa:bb:e8:5c:16:f4:31:34:fc:a2:
c3:f0:f6:bc:b9:77:a6:86:88:39:2e:25:de:e9:96:
65:08:f1:2a:18:39:3c:3b:e9:e5:78:87:ff:da:14:
d9:c4:b8:5e:84:b9:12:3d:4a:6b:90:05:8d:99:c3:
21:6d:a2:0d:a7:a3:8a:62:ba:41:39:5f:7d:49:15:
e9:ff:13:49:ad:cc:58:12:dd:a3:b8:89:1b:92:02:
67:ac:18:3b:74:02:1e:87:16:f6:b6:b8:7d:f0:04:
82:95:fa:63:53:28:d7:d7:53:63:6c:9d:13:22:99:
12:a8:de:3c:de:3b:48:af:18:a8:f7:35:21:a1:bd:
05:a7:f9:b8:d6:21:ab:38:42:e1:31:86:72:59:32:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AA:87:74:94:AB:EC:15:1D:6C:EA:B0:08:E0:C3:43:FD:07:B5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27997bf4-d640-3f1e-848a-a02e0a2f003a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.240.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c5:1e:5c:c3:c1:d3:2b:e2:85:ae:0a:d7:57:e8:14:e2:29:
06:16:b1:d9:f5:82:e9:a1:04:6b:b9:8f:c7:f1:be:aa:94:fa:
5f:34:64:cf:1f:c2:c9:e1:05:21:4e:14:59:87:e9:69:9d:c4:
5a:76:46:26:85:81:16:0c:84:63:e7:89:56:76:bd:2f:a9:1a:
4f:d6:93:c8:a8:74:21:99:8a:ab:e0:5f:49:b1:63:5a:0e:ce:
19:d9:8d:57:4f:21:89:1e:eb:13:29:6c:45:54:d4:41:01:8a:
c8:2d:aa:34:01:b9:47:ab:9c:f5:e2:b5:45:e9:b6:e5:b7:5a:
2f:f2:6c:17:8d:73:51:a3:41:90:81:ea:f1:02:6d:17:4e:4b:
64:48:06:a1:bb:a7:90:4f:ae:29:93:60:bd:a2:ba:b8:07:6c:
f4:3c:ff:29:3f:41:21:ec:27:e4:4f:ba:5e:14:4e:56:ff:04:
3c:be:da:e7:7a:6d:b7:ec:b6:f7:8a:c4:3b:0d:83:1a:f4:41:
78:20:24:c0:c8:bb:7c:dc:6c:cb:d7:ec:6a:b3:fd:ef:75:09:
32:ee:23:24:6e:d9:ea:a9:d6:1f:ac:92:2f:d0:91:7d:77:46:
9c:19:c6:29:07:60:aa:37:be:df:a7:c7:b5:d1:0d:f7:07:d6:
27:40:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:03:13 2025 by rpki-client