Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc70323-945f-3770-a225-d32f91e75a59.roa
File: 4fc70323-945f-3770-a225-d32f91e75a59.roa (raw, json)
Hash identifier: IICj69WYlj7ZS+JQZ5M6zlDdV+xq4Rv9T77HeN9NJcw=
Subject key identifier: 7B:89:76:D1:CB:00:F9:9D:04:4D:D1:BE:B6:FA:68:6D:7C:99:B8:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11A662A89A514B37E41C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc70323-945f-3770-a225-d32f91e75a59.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:a6:62:a8:9a:51:4b:37:e4:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=7b20acfd-47d4-4863-a88f-afb7c096ecda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6d:b5:ad:80:27:41:a4:5d:9b:e8:64:50:e7:
a9:b7:a0:f0:9e:b0:8b:d2:2b:b4:fe:e8:14:5b:fa:
d1:a3:b1:d9:98:9b:8c:7a:6e:91:20:6f:04:25:77:
43:4f:71:72:74:9f:3a:56:76:2c:ea:4e:3c:01:d0:
1a:75:31:9f:dd:3c:7a:19:ba:cb:60:c7:77:cf:83:
f2:4a:89:02:52:77:a1:85:53:38:98:48:25:c3:db:
2a:ee:5e:8c:d6:50:0c:43:12:22:50:0d:d2:ce:3c:
ad:ea:f5:8f:3c:bc:b7:e2:0e:34:62:2a:65:52:e3:
df:f1:96:68:5a:46:d8:98:a9:66:8a:0c:3e:ee:89:
a0:22:b1:18:88:82:1b:68:a0:36:65:01:dd:86:4c:
fd:4e:fe:73:32:9d:12:de:f3:3b:53:29:3f:c1:cd:
d8:2f:63:1d:25:8f:b4:48:f7:f7:0c:46:d1:64:7f:
fd:3a:a4:8e:0b:df:8b:d4:d9:ce:9c:c1:57:73:0f:
92:cd:fa:f7:33:8b:24:d9:18:b4:b8:ff:52:c0:a9:
08:91:3e:5e:ec:a5:ff:2e:43:48:ca:1a:53:69:c2:
c2:0b:1b:a2:72:9c:23:43:0a:a6:42:20:e3:be:b1:
91:7a:e7:d6:7b:f7:8d:75:8a:88:e7:17:8c:27:2b:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:76:D1:CB:00:F9:9D:04:4D:D1:BE:B6:FA:68:6D:7C:99:B8:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc70323-945f-3770-a225-d32f91e75a59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0c:a3:a3:53:90:77:d8:64:cc:02:40:d0:82:82:41:d1:71:
07:22:71:b4:9c:38:16:b0:9a:2c:8f:c8:6b:37:92:a7:d1:c6:
fe:18:72:da:5a:26:25:2d:a0:99:48:56:fb:59:c5:2d:d3:e3:
82:10:67:dc:77:73:6c:ad:4c:90:4c:80:ec:4a:1f:43:17:63:
3a:32:68:3b:27:1f:61:96:18:fa:05:e2:17:5c:7d:18:b5:c9:
28:53:26:e1:ed:ec:3d:ba:1c:19:5d:b2:24:61:87:74:56:77:
1f:59:ae:48:4e:5d:97:ff:f2:d9:0b:dd:bc:1e:08:9b:01:ec:
7d:e1:67:06:c2:85:b7:33:f2:52:bb:83:9e:18:f0:77:92:33:
6f:71:53:47:24:81:0c:88:4b:8a:21:6e:fe:af:1d:96:55:be:
ce:ab:e5:54:56:88:f0:54:c0:4e:8d:98:ab:0c:b6:5e:63:4c:
a4:16:f8:d3:94:e7:e5:de:81:d7:24:5c:4b:46:4d:48:73:cb:
b1:30:ba:2d:90:b6:8b:75:f3:3d:94:4d:dd:49:ee:62:da:d0:
f3:ce:ef:a0:27:4a:25:c6:c0:a6:4e:bc:22:6b:da:06:d7:81:
04:69:d3:28:94:da:bd:83:4d:2e:c9:86:6c:3a:7a:e6:a9:00:
60:31:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:45 2025 by rpki-client