Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c0170fd-5731-3b45-b167-123f8df1bd49.roa
File: 2c0170fd-5731-3b45-b167-123f8df1bd49.roa (raw, json)
Hash identifier: k3aG5dcmDPDuzrkj7CYEUFejVxhMBvkvu+SolC4Tf5w=
Subject key identifier: 68:BB:33:FB:50:EF:A2:6A:10:92:CC:80:0C:63:4A:CE:56:5D:79:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10AAAA04E9646C58A661C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c0170fd-5731-3b45-b167-123f8df1bd49.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 73.165.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:aa:aa:04:e9:64:6c:58:a6:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4c51dd90-72c5-4246-be54-ce5fb1d9c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:eb:59:32:25:08:a8:9d:4a:8e:9e:30:db:
8a:57:d1:38:ef:da:93:aa:3b:90:22:d0:f2:79:96:
ea:66:61:61:9a:18:2a:bd:da:e9:12:72:08:8d:97:
44:8e:63:e0:61:a2:5d:93:38:f5:66:36:a5:43:2b:
76:06:ee:3a:02:c2:03:70:4d:6f:b7:c0:57:6e:f4:
19:8a:44:69:86:4f:e3:a4:07:40:7c:55:4c:02:6f:
ab:99:30:d7:7d:01:48:fa:e9:1a:ea:29:24:a9:4c:
8e:06:a8:aa:54:2b:65:32:2a:14:11:e7:4f:e6:a5:
1a:6a:94:1f:49:a0:a3:34:39:d6:e3:d8:e7:79:55:
75:75:7b:80:57:09:3c:31:e8:da:8b:ea:e2:13:be:
6a:71:d2:25:60:ef:b4:4d:92:0a:8d:85:26:bd:c0:
00:7c:6d:4c:3c:e5:4e:94:6e:15:62:dd:1f:bd:fe:
84:b4:cf:2f:9b:14:b8:50:5d:5a:5a:47:15:10:fa:
db:96:d6:d9:d2:3d:e0:ae:0f:05:be:6f:b3:9d:e7:
80:5e:02:30:b3:a9:40:0a:89:94:73:53:1c:3d:0f:
df:c4:b9:5b:45:a6:94:fe:fa:45:8e:ee:2c:5e:21:
8c:7e:04:cf:d8:36:c1:b0:47:19:04:41:54:a1:21:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:33:FB:50:EF:A2:6A:10:92:CC:80:0C:63:4A:CE:56:5D:79:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c0170fd-5731-3b45-b167-123f8df1bd49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.165.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:65:5c:1f:31:8d:54:80:e8:28:e8:9e:9b:37:61:45:70:fe:
e9:fd:51:bf:8a:a9:14:fe:f5:2b:92:8f:70:d0:89:83:d8:d6:
11:10:1b:a7:67:81:bf:33:da:d6:b0:df:80:cd:a0:56:62:be:
4d:e6:ce:0a:b0:c1:50:fd:41:6c:14:a5:36:04:23:d8:9e:c3:
c8:1d:a3:50:e2:a9:13:ba:fb:7f:01:44:40:b0:89:06:43:5b:
9a:b6:2b:5e:ae:f0:e4:48:e7:3e:01:9f:01:ac:58:23:dc:9a:
99:fc:d7:cc:2a:70:68:a6:35:d1:cc:33:5b:af:e4:c5:8f:24:
0b:6e:8f:58:e8:17:89:10:09:21:78:00:ae:d3:6e:85:14:f2:
58:34:2f:6f:56:72:b7:5e:e8:a7:6b:fd:a2:27:e2:91:74:8d:
36:12:ba:04:ea:b8:7d:5d:10:dd:bf:c5:14:02:6d:ea:c4:44:
42:16:fc:e8:95:8b:de:47:43:8c:8c:2d:4d:db:50:a1:00:3b:
a5:14:6b:bd:96:4d:f6:35:ba:c4:97:59:96:6f:fc:e0:a7:4a:
59:ed:53:02:84:10:e4:c9:0b:ef:eb:41:b4:06:30:fa:e7:39:
5c:5a:4b:ae:4e:79:d3:27:0c:83:28:86:1f:bf:32:cf:cf:54:
67:49:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:39:54 2025 by rpki-client