Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/281609db-4ece-3733-aa47-fcf8f9bd68a6.roa
File: 281609db-4ece-3733-aa47-fcf8f9bd68a6.roa (raw, json)
Hash identifier: ON+uYjXqpCnftXSaOWYQMwrBpUZee4iv+wGXu4d5hj0=
Subject key identifier: C8:71:B0:A6:13:CE:86:8A:3F:2C:09:8F:FA:3A:D9:A8:39:60:B5:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12563D76D256ACFDD87480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/281609db-4ece-3733-aa47-fcf8f9bd68a6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 73.233.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:56:3d:76:d2:56:ac:fd:d8:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b2948866-37bc-487c-b6c2-177c966a9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:27:87:84:18:0b:23:8e:e5:78:fa:90:96:
70:6b:77:fe:2c:ae:e4:61:c2:27:24:11:84:21:27:
6f:17:43:00:30:e1:49:73:d6:f9:98:eb:aa:9d:95:
90:5e:34:ab:03:02:b5:a2:e1:e2:a6:71:5d:09:5c:
46:09:68:a1:6e:66:74:a8:66:49:84:21:d3:e4:1a:
8c:ca:35:e1:ee:58:3d:7f:b9:ad:e8:0c:db:23:b8:
ef:fe:71:5e:5c:3f:d0:4d:92:4a:b6:da:e8:8c:ac:
e4:46:a3:4e:f2:d5:8c:8c:e5:1a:c6:87:f6:d3:01:
26:d1:50:9c:6d:64:e5:ac:b3:f9:52:1b:99:b9:99:
05:2c:59:bc:58:72:30:76:9a:f9:de:5b:c4:8d:c2:
de:e0:49:aa:c0:bb:09:79:ac:83:af:1a:be:14:55:
b5:63:81:1d:49:04:bb:48:28:57:11:1c:52:85:2f:
38:3a:f2:00:d4:90:80:e7:7e:ea:6b:23:e0:a4:8a:
13:f8:ae:6e:f6:d9:78:00:5c:21:18:fa:4d:e5:c0:
b3:3f:7c:bb:2e:56:a2:5c:a2:79:92:1f:f0:b1:1c:
b6:3a:44:b4:21:41:b8:ef:b6:e7:27:6a:81:b0:ba:
a7:16:e1:a8:5c:2a:8a:d4:d7:ce:57:b3:44:d3:1e:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:B0:A6:13:CE:86:8A:3F:2C:09:8F:FA:3A:D9:A8:39:60:B5:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/281609db-4ece-3733-aa47-fcf8f9bd68a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.233.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:32:d7:3a:88:f0:95:f1:24:7c:e4:d6:38:05:6e:15:e0:60:
fc:93:cb:3b:cd:d9:f6:2d:3c:0d:21:92:95:2f:cc:65:37:6c:
7b:3c:72:d7:39:31:47:28:7a:56:8b:10:f4:94:36:88:c4:4a:
7e:26:fd:05:bf:8d:03:7b:3a:04:a1:e0:ff:c0:05:32:63:5e:
d0:d0:d5:e2:a6:f9:3b:ea:a1:f8:f0:24:bc:bb:a8:28:af:1f:
c2:96:bb:f6:a0:ca:64:86:42:91:7c:14:9a:2f:54:ec:9d:0e:
7c:87:73:ab:62:cc:7e:40:ef:96:ee:14:65:21:d1:9d:56:57:
66:a2:45:00:5e:e1:d1:c6:92:29:d2:e7:11:7c:ec:99:97:e6:
52:57:6b:e7:01:2c:73:a1:e4:6e:5c:d5:57:a6:71:4c:cd:8f:
90:72:53:eb:1b:e7:78:8d:16:5c:ad:30:f3:f6:5c:05:2e:91:
c5:01:85:26:63:11:6d:38:da:af:df:ef:43:a0:06:72:79:76:
18:69:ff:ce:23:7f:36:b7:34:a9:f1:1f:82:41:a4:4f:f3:f3:
fb:e3:68:5d:17:85:23:40:ec:50:66:25:a2:06:92:11:84:7e:
48:ca:76:60:ae:3f:9f:94:3e:dc:f9:a1:52:bd:af:a1:be:35:
a1:64:d4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:26:57 2025 by rpki-client