Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66e4c850-9e1e-3da7-ae0b-abe7a84adc08.roa
File: 66e4c850-9e1e-3da7-ae0b-abe7a84adc08.roa (raw, json)
Hash identifier: 3M+f+P7IQIU138djSlWrxVa0nYuI+s8M/efhiisrxHA=
Subject key identifier: 7A:0F:72:3F:12:F5:C0:D0:AE:C0:1C:C4:CA:6D:98:AA:B4:AF:DB:F9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E584133AD509F87140700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66e4c850-9e1e-3da7-ae0b-abe7a84adc08.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.234.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:58:41:33:ad:50:9f:87:14:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=211f343f-9630-4f79-b33a-ace91eae32f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:bf:4d:fa:1b:4e:71:e0:31:e2:56:89:75:
17:9e:da:f6:d3:72:7b:07:c6:1f:3e:26:61:1c:ce:
36:db:73:14:9e:28:21:5a:86:20:d5:ff:bf:46:c2:
5e:ce:17:56:2d:5a:46:85:0e:5d:28:51:f6:0e:70:
fd:88:a4:28:4c:e7:51:03:0f:da:a1:66:f3:d3:b4:
f9:0c:0b:a5:60:6c:80:40:47:c5:a8:28:e5:11:5c:
40:f1:1b:95:e2:3e:f5:7d:75:ae:91:5d:bf:6e:a2:
2f:2f:9a:44:9b:61:26:60:ab:4c:a4:76:00:5d:a8:
43:01:98:93:f2:dd:93:d7:60:fd:a5:71:f1:b1:41:
a1:4b:e2:ad:1b:84:2d:23:ee:f9:62:d5:e3:e5:ff:
43:7d:00:40:fc:11:f2:6f:13:da:ac:52:44:63:a4:
24:20:86:0a:f7:b1:94:e2:e9:08:1e:e8:a4:73:19:
9c:81:d9:38:da:9c:ae:bf:9f:18:db:94:83:db:c6:
4f:eb:7b:9b:47:77:9f:46:b6:a3:8b:81:e2:3f:44:
14:5a:0d:9d:13:41:45:25:82:31:f3:d2:81:54:34:
63:e3:62:53:98:bf:da:57:a6:12:1f:69:a5:3d:1e:
b8:3b:79:2b:fe:91:c1:7e:af:b3:f1:9f:90:3b:60:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:72:3F:12:F5:C0:D0:AE:C0:1C:C4:CA:6D:98:AA:B4:AF:DB:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66e4c850-9e1e-3da7-ae0b-abe7a84adc08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.234.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:03:96:9c:f0:58:fb:89:43:ec:4f:62:68:fb:43:0a:1d:10:
5c:0f:2b:19:83:92:2b:77:b8:0f:9b:bc:10:52:37:d2:db:ca:
21:b2:4c:6e:78:9b:e4:a8:5d:48:9a:1a:a0:c3:4c:69:e4:4f:
12:3d:98:41:81:4f:07:5c:48:48:f7:02:c3:2f:d0:c0:f2:20:
c1:f6:ad:84:18:fe:75:8c:b3:8a:de:e1:8a:fc:7c:3b:58:f8:
39:48:1f:ee:13:2a:84:4e:d5:8d:82:06:54:3f:e0:32:50:83:
3c:bb:92:68:7c:09:e7:44:73:50:73:32:03:29:d2:46:fb:4d:
be:2b:f0:f0:95:91:99:df:2e:10:62:8c:99:36:5c:eb:82:97:
fe:8e:aa:52:e5:11:1f:d0:a9:76:29:31:d7:00:74:36:f7:ac:
35:f1:f6:6b:57:29:ae:69:cd:76:8d:ce:ee:ac:b2:9d:e5:f8:
80:45:80:59:f6:2e:66:82:7e:81:da:15:6a:f8:73:22:fc:ee:
ad:85:58:50:2b:d9:ad:06:14:35:1d:72:cd:d7:f2:25:fc:92:
06:cc:c6:95:9d:70:11:8a:44:fb:55:36:ea:46:92:9a:ba:48:
bf:a7:5d:f4:bc:ca:c4:6e:90:67:42:36:2e:21:12:39:ab:d5:
40:2e:4c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:26 2025 by rpki-client