Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4039296b-0947-365d-a9fa-55f5c90c45ca.roa
File: 4039296b-0947-365d-a9fa-55f5c90c45ca.roa (raw, json)
Hash identifier: 4a/ckBdIdZVBeIqbVceyfKoKODLKjYfs6SEXFQdP6yk=
Subject key identifier: C2:8C:2D:B5:96:73:6D:4C:23:90:F8:0D:1D:5F:46:4C:2C:53:A2:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12B9E7F6C8FEE6BB41B280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4039296b-0947-365d-a9fa-55f5c90c45ca.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.247.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:b9:e7:f6:c8:fe:e6:bb:41:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=46b4b8d2-96c8-4c72-832b-c01174a5d397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:31:63:d9:05:12:af:81:dc:7b:e9:12:67:
fa:d6:b2:24:86:fe:c6:42:38:5f:51:89:a2:dc:85:
39:3c:3a:88:f7:aa:3f:92:f3:be:0b:3d:70:5c:a3:
fb:54:c5:60:1d:ac:34:05:54:78:ce:5a:66:3d:da:
55:9e:16:48:66:76:2b:3b:f0:e4:3c:01:34:46:3c:
50:7d:96:47:63:2c:38:23:89:3a:a1:74:3d:db:07:
01:ff:f6:f3:0d:a1:fa:bf:42:33:99:09:c6:5a:4f:
61:94:27:7a:fb:c1:19:0e:80:ba:f8:c3:4e:81:bb:
71:38:8a:f4:1d:a4:29:7c:56:de:53:40:64:a9:37:
f0:54:f5:7d:cc:a2:1a:0c:9a:81:99:0c:9c:c5:58:
d2:4d:55:98:09:f8:bd:dd:c4:75:85:4c:d9:65:9e:
2d:6c:7b:92:70:91:f0:0d:f8:a6:dc:7a:bc:81:94:
29:87:cc:24:c7:cf:ee:dc:bf:91:57:9f:8b:80:d1:
cb:ab:3d:99:46:fb:07:23:82:fb:2c:f3:f5:3d:95:
cc:02:ac:06:68:64:4e:27:6b:c5:d3:d5:4a:20:c6:
56:ce:06:89:57:81:b7:3f:45:21:39:f3:ca:ca:e9:
57:e8:8d:57:7d:4f:6c:97:c9:ef:4e:6b:e2:9c:ea:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:2D:B5:96:73:6D:4C:23:90:F8:0D:1D:5F:46:4C:2C:53:A2:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4039296b-0947-365d-a9fa-55f5c90c45ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.247.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:fd:48:6d:4a:09:50:f1:93:32:2f:61:95:88:da:58:c4:e6:
33:6f:2a:8c:35:9b:51:e8:9c:37:b7:87:11:93:5c:99:79:07:
c1:4b:d5:94:2c:fa:9b:0b:89:34:39:06:3e:2b:15:8c:f2:6d:
f8:45:89:68:87:02:26:d6:e4:a3:ab:71:8a:f0:d6:fd:de:72:
ad:58:1c:eb:c3:80:a3:a7:d3:4c:38:92:b4:26:62:b9:07:ba:
a1:e2:d8:96:a6:23:31:d9:f6:15:a9:5c:18:82:28:da:75:e3:
f7:f5:42:fa:81:42:75:a6:00:62:2a:f5:7b:62:51:58:e5:cd:
5f:f0:c2:88:0f:df:8b:f1:56:2b:be:c4:63:36:35:28:12:2a:
5f:bf:c7:c4:c3:ea:c7:e3:51:ac:a7:83:d8:e9:cf:99:74:55:
e9:d3:b8:b1:91:0d:ad:76:af:31:d9:a4:87:a7:44:81:7d:c7:
3b:b4:ea:07:90:04:09:f8:a0:3b:79:f2:db:20:9e:ce:8f:ce:
0f:9b:78:80:35:29:89:7f:a8:86:de:86:21:66:6e:c6:fc:db:
2a:26:af:87:8c:29:51:6f:ca:89:aa:f4:d2:18:32:8c:43:43:
ab:b3:87:73:26:7d:1c:fc:28:f6:0e:89:12:50:db:5e:ec:c9:
7c:49:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:14 2025 by rpki-client