Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66289e58-8a96-3155-9a1c-7206a2be2bce.roa
File: 66289e58-8a96-3155-9a1c-7206a2be2bce.roa (raw, json)
Hash identifier: mXA7DAK2/kx043xxI5zgq+mKJik5c6n560zvGl/mx18=
Subject key identifier: E5:B2:1A:DB:AF:77:F0:68:F4:0C:82:68:51:C8:DB:0C:3F:3F:9A:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B16638DA4C0697E963B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66289e58-8a96-3155-9a1c-7206a2be2bce.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.253.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:16:63:8d:a4:c0:69:7e:96:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=152482a7-d989-40e8-b34c-0611056e8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:cf:0f:ca:09:d2:cf:f8:cd:97:8c:ef:cb:
86:c9:75:24:82:a4:b1:69:38:35:3d:19:a2:59:61:
98:2e:a3:23:0d:7b:8a:fd:40:05:c4:fe:2d:4d:4b:
4c:48:ac:d5:ee:60:f6:74:86:35:b9:eb:3c:94:5f:
4c:16:d9:c7:91:a5:01:68:4c:3e:4f:ad:1a:75:48:
27:9b:c2:c2:de:0b:ac:e6:3c:18:93:11:8e:6a:92:
6a:39:b5:40:74:2c:51:f4:d5:a2:51:52:16:57:db:
7d:4b:25:9e:01:30:ee:98:9d:3c:49:c7:0d:5a:71:
4f:07:64:21:16:b5:f0:bf:80:84:96:c1:77:ab:ca:
73:cc:f6:19:d6:2c:1f:18:df:e9:8a:75:58:cb:5b:
c3:86:a6:c8:9b:ed:98:65:84:1d:fc:35:ca:07:d9:
e0:17:ea:58:56:f8:a8:fe:b8:b0:c9:a9:16:00:82:
a6:07:ca:94:af:65:c3:10:02:74:6f:48:3c:0a:7f:
7c:fe:96:96:91:8d:13:6c:ba:78:e9:d3:41:75:1e:
68:7f:36:73:85:7e:78:0f:a5:02:0f:13:0b:bc:e1:
28:72:f2:c1:1c:c5:c7:7f:8b:fe:ae:32:29:31:7e:
03:1b:25:17:2b:de:f0:7e:59:41:39:72:6a:cd:49:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:1A:DB:AF:77:F0:68:F4:0C:82:68:51:C8:DB:0C:3F:3F:9A:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66289e58-8a96-3155-9a1c-7206a2be2bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.253.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c7:ea:b3:20:64:ab:d8:d1:1f:dd:ad:41:e0:01:38:05:c3:
85:1c:d8:32:4a:77:da:1a:03:67:44:e5:01:39:30:81:c2:85:
22:7f:07:88:38:26:6c:e0:cf:bf:07:84:9c:66:b3:ad:d5:37:
e8:a4:3f:99:47:0d:53:cc:3d:6e:71:40:5f:25:e5:32:f9:fb:
9f:5f:81:cf:10:b8:d3:5f:dd:aa:e8:32:24:c0:2e:31:92:1e:
32:d9:01:68:6e:fb:75:72:f1:37:b2:0f:c0:fe:93:00:4c:f1:
bc:45:cf:40:b5:ef:63:36:f7:a2:78:58:39:7c:2b:d9:a5:da:
5a:4f:c9:58:a0:8b:b4:23:09:ab:f9:87:a5:59:1a:28:ee:36:
74:61:c9:81:e6:e5:17:e8:75:89:33:2e:aa:48:fb:8c:ab:2f:
d6:7c:11:f3:6f:1c:77:d3:d3:e1:5d:4a:10:1e:31:2e:dc:77:
e0:73:28:4c:b8:b8:a4:52:4c:d9:c1:af:c6:21:30:4a:35:59:
0a:30:12:0f:4d:4a:c1:ab:1c:be:ba:c2:8d:9e:2a:e1:dc:7d:
a9:05:b8:98:7d:cd:60:f6:3b:e7:c0:5a:92:b6:09:8b:b7:78:
47:6e:60:5c:4d:dd:10:df:12:90:d4:b4:4c:8c:a9:ce:7a:5c:
16:7d:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:58 2025 by rpki-client