Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/309eac96-8f19-3f68-8f08-2c30fa4d49d5.roa
File: 309eac96-8f19-3f68-8f08-2c30fa4d49d5.roa (raw, json)
Hash identifier: tewQd2NlV2Qz2elG+SaYY2bZDOjb+BqCKl9EKMWo1wk=
Subject key identifier: EC:6B:49:FD:19:C3:77:BC:68:4A:29:F4:E1:79:88:52:E4:09:1A:38
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B212B61DA33E510AD85C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/309eac96-8f19-3f68-8f08-2c30fa4d49d5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.68.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:21:2b:61:da:33:e5:10:ad:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6b076bc3-bd2f-4636-8f43-d10b7fa1dbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:11:b3:01:a0:a1:46:fb:19:6a:1f:b2:58:
44:25:7f:fc:1b:17:de:b0:45:af:c5:7b:91:09:c1:
65:c9:4f:72:9e:59:10:c0:91:5d:75:6a:4f:77:15:
d8:00:af:57:b7:26:2e:c1:1b:09:0c:20:d6:f2:16:
c9:7d:66:47:00:b1:99:c0:a9:16:2f:75:bb:91:8b:
b8:99:73:40:ff:e7:0c:d1:b6:df:c1:a7:a5:39:63:
91:5d:6f:63:09:5d:75:ae:56:20:01:72:d3:c7:68:
a6:dc:be:18:a9:6e:c1:93:63:fe:97:36:cc:e2:6c:
a8:23:63:4d:16:39:15:47:71:bd:83:6e:e1:24:40:
d1:9c:54:e0:af:1e:dd:0b:46:7b:bd:07:e1:2c:29:
bc:74:5b:70:d4:31:4b:51:26:8e:00:02:8f:09:c5:
0e:12:d6:4f:96:db:5d:65:fa:1f:ee:01:d8:2d:c5:
bc:a7:ff:35:56:92:0f:31:db:1a:d7:31:9f:38:1b:
a6:bd:61:70:be:1e:7e:ae:55:21:f7:1e:a6:b6:80:
5c:26:38:5a:f5:25:81:fb:88:06:8a:3b:6b:27:a3:
57:cb:7b:6b:bd:88:ca:b6:4e:f5:03:c1:fb:2d:cb:
af:ac:83:57:2f:a1:81:81:e7:00:35:76:08:c1:4d:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:49:FD:19:C3:77:BC:68:4A:29:F4:E1:79:88:52:E4:09:1A:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/309eac96-8f19-3f68-8f08-2c30fa4d49d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.68.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:5a:7b:14:47:34:43:9f:79:59:d5:b7:69:64:34:48:7c:8b:
20:0f:d7:cd:bb:97:fe:93:32:98:d7:bc:24:c4:fb:4f:99:11:
21:3b:fe:c3:4a:aa:d5:6f:a3:26:eb:6e:57:d4:ea:fc:41:7a:
be:7d:f9:0f:42:d2:04:24:e1:94:a6:2d:e3:bd:59:6a:b5:5e:
ed:42:cf:a2:a7:e2:66:10:92:74:da:4e:7b:13:19:2c:be:f6:
54:cb:f6:3c:c4:98:2c:c3:01:57:d2:2c:ce:26:61:fb:cc:d4:
a4:c4:e8:2a:4f:0a:8d:e3:d5:06:bb:f9:c5:d5:d6:55:a8:07:
12:d9:6c:7b:5b:57:3a:96:1b:98:e6:23:7e:ed:a7:8e:1d:6e:
29:2a:c8:05:97:1f:08:93:71:e6:72:72:17:58:fc:c5:90:ae:
30:27:fd:21:46:5d:93:5b:54:7e:b3:80:cd:10:7c:cf:07:a9:
07:20:a0:09:4f:84:e2:94:05:ee:2e:48:f6:0e:76:fd:34:3e:
79:ca:3a:31:cb:c9:03:a3:a4:a1:75:11:3b:e4:6e:b2:f3:de:
ad:bd:ea:ac:3b:c3:2b:c2:80:28:bf:58:7e:65:fd:2e:c4:09:
93:08:aa:58:79:23:06:70:2d:e4:a8:01:aa:42:62:81:79:d6:
c4:76:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:02:26 2025 by rpki-client