Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3422e428-0a13-359e-80ad-919baf3fea3c.roa
File: 3422e428-0a13-359e-80ad-919baf3fea3c.roa (raw, json)
Hash identifier: VI7R0CSecEkSkfm+x6Qhb1UZ/getHYeXA1OM+GSYJFw=
Subject key identifier: 09:0B:A5:83:33:22:9F:C1:5B:B0:BE:2A:D4:27:74:88:CC:12:7D:62
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AA3A5C7F8123833303B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3422e428-0a13-359e-80ad-919baf3fea3c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.157.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:a3:a5:c7:f8:12:38:33:30:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f2e3cb4d-9db2-4e37-9e31-fc5f27dfc42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:ad:e2:0e:6b:7c:ff:7f:f4:29:22:cc:40:
b3:c0:53:de:c5:98:78:4f:77:15:c2:5a:03:56:cf:
b7:54:53:44:71:ac:e6:96:7a:0c:0c:28:29:22:38:
82:40:17:11:22:f2:66:ac:2e:20:0a:e1:63:b4:5b:
de:15:12:57:95:02:35:5e:f5:08:45:8f:cc:0d:71:
47:84:c4:3e:1b:6a:d9:48:70:9c:7a:40:cf:fb:af:
a0:3c:a6:21:c5:3f:f9:3c:47:24:4f:37:fc:89:a0:
06:d6:5d:0f:80:c7:85:bc:f5:0d:2b:be:f9:36:c5:
b8:b8:e2:53:76:7e:2f:50:8b:37:6f:4c:f8:4a:a1:
cb:d5:0c:da:8d:c8:3e:21:2f:b1:67:aa:b9:f2:a2:
3f:ce:a9:90:2b:a5:24:fa:35:0b:0e:c7:44:a6:21:
7c:04:7a:31:cb:fc:f0:f0:85:14:03:a1:69:84:ee:
dc:11:0b:21:76:af:25:62:89:00:0f:48:60:ed:6f:
a0:72:7d:a5:cd:1a:ef:c7:db:07:5c:36:83:c8:d0:
99:b7:a5:e7:89:06:22:49:f1:a7:c0:c2:c4:c5:74:
4f:34:0f:20:fe:70:2b:4a:2d:69:c2:a0:90:72:73:
5b:63:43:3f:65:f3:3b:a6:d6:5e:7e:51:4b:c5:0d:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:A5:83:33:22:9F:C1:5B:B0:BE:2A:D4:27:74:88:CC:12:7D:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3422e428-0a13-359e-80ad-919baf3fea3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.157.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:22:ed:c7:b3:f9:d4:b1:fe:a1:cf:0d:d0:10:42:42:d9:64:
d4:c5:5f:8c:e6:ba:b8:a5:ef:2b:cd:4a:5f:30:54:d2:4e:5b:
7d:eb:04:ec:3e:9f:d3:63:3e:6e:60:73:f8:9d:4e:93:01:d1:
1b:e6:89:21:cf:d2:ac:da:b4:fd:c0:56:39:1f:0b:6c:a2:cc:
95:f2:40:f1:f1:93:d3:c0:0f:43:90:11:d6:f4:64:1f:86:e4:
c4:f1:bc:84:cc:33:ce:df:00:a5:f5:d3:bd:e4:f6:28:6e:1c:
8a:b3:85:37:7d:9d:bb:55:a6:42:2c:7c:e1:ee:2b:8b:60:af:
20:e9:d0:89:43:6f:51:f8:48:36:4a:6c:d6:3e:11:a3:88:cf:
b7:35:e9:bd:85:7e:f3:e7:9e:07:f2:b0:d6:b8:6e:f6:73:4c:
a3:ed:d5:b1:9b:0e:58:34:25:44:e7:17:5d:b5:dc:59:92:23:
94:9e:fe:32:b7:ed:79:69:1a:f0:e3:27:26:f2:ec:20:b7:4c:
3e:38:f8:e4:63:a8:89:bf:d3:e6:59:0b:af:be:01:6b:f1:b0:
fd:f2:7c:98:10:f7:aa:78:43:37:d6:48:62:18:41:ca:10:27:
5e:ac:28:8a:37:f5:2e:6d:69:fa:c7:60:b5:6b:43:d5:6a:d9:
02:e9:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:35 2025 by rpki-client