Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d78412f-61c5-30f9-834c-6e75d1687dc3.roa
File: 5d78412f-61c5-30f9-834c-6e75d1687dc3.roa (raw, json)
Hash identifier: fnJQOYGcTBvj3eJbmCiNWO4wdckk7NOzm9zMJ3r1VV0=
Subject key identifier: 02:AF:B1:FC:D4:E9:76:05:E2:D4:4C:6A:0F:F1:3B:05:A4:71:CC:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B07CA47C100374C97EB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d78412f-61c5-30f9-834c-6e75d1687dc3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.218.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:07:ca:47:c1:00:37:4c:97:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=025d3023-2dea-4885-926c-ed2290f537a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:ad:90:a0:9b:e0:33:2b:ba:76:e2:71:82:
24:88:f6:24:4a:9d:67:58:22:ac:b3:21:23:ba:2f:
f5:2c:d3:f9:ae:ff:e9:cf:6f:17:5a:3a:3c:2b:59:
0e:63:80:5a:0a:49:ae:38:b0:e9:7e:80:ba:f4:13:
4b:16:0f:e2:60:b7:0a:87:07:71:6e:36:d7:84:97:
2f:97:66:f8:70:9e:17:a3:96:99:17:74:33:33:d4:
27:ae:91:10:8a:89:6b:9d:55:cc:69:33:3c:45:90:
f1:bb:7c:37:72:b0:81:18:33:44:c5:1b:ed:45:06:
cc:02:83:b0:1e:ce:38:5d:68:d4:a3:ed:4f:f2:90:
51:c0:8a:33:80:37:ad:9e:25:b0:2b:ea:42:dd:00:
47:9a:1c:91:10:a6:fd:22:f6:08:13:f4:c6:90:58:
23:e5:cd:82:3e:c2:7c:5a:16:c3:f3:f3:87:47:36:
82:a9:9f:dc:5d:ee:09:a3:6b:be:9b:89:4b:c8:65:
9f:66:db:2a:df:39:38:36:95:0c:44:db:b4:22:c9:
08:02:39:6d:d6:c3:8f:14:cc:c2:74:00:95:a9:33:
b8:c4:c6:7e:b1:f5:dc:86:01:d2:18:1c:44:c2:16:
c7:30:8d:48:9a:2e:32:b2:c6:41:b7:5b:38:53:fc:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:B1:FC:D4:E9:76:05:E2:D4:4C:6A:0F:F1:3B:05:A4:71:CC:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d78412f-61c5-30f9-834c-6e75d1687dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.218.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:56:21:89:5e:5d:92:06:e2:c3:a5:d8:be:18:c2:bf:41:5c:
64:76:32:07:1e:cc:c2:28:43:8d:22:5b:a1:d7:ce:42:3b:e6:
5b:7b:9c:11:03:13:ab:1c:a7:c7:93:6d:6f:e3:ac:9f:92:2e:
86:b4:af:d7:b4:43:06:72:7d:12:40:07:8d:4d:c5:c5:90:5b:
80:74:62:d1:29:7a:17:5a:28:84:5d:c5:94:93:bc:86:e8:e8:
15:14:57:ae:5a:3b:62:db:4b:e1:46:b4:88:70:bd:02:0d:a2:
22:c0:fe:63:0f:64:d4:75:e2:9a:96:f4:35:16:38:2f:8c:7b:
a9:59:03:4f:10:0a:2b:b1:71:57:be:a3:b4:cb:01:1e:7d:09:
69:d9:4b:0f:70:b2:07:1c:82:cd:bb:32:59:15:f9:25:93:4d:
4c:0a:95:0a:15:bd:e8:35:d4:f6:fb:de:0f:38:42:b7:19:41:
f3:d4:41:82:04:03:26:f6:e8:a7:41:9d:5b:04:13:e0:99:d0:
65:64:89:93:2a:74:1f:8b:74:60:b5:61:8b:b2:d2:fa:8e:1a:
6f:b3:73:b7:0b:2f:0b:29:81:2b:4d:87:31:aa:e1:68:e0:3a:
06:b5:7d:fc:e0:9a:d2:81:3d:42:44:b9:54:66:7f:ce:91:96:
a1:c6:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:21 2025 by rpki-client