Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa
File: 7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa (raw, json)
Hash identifier: HjWfCAL8xzeypGR6DetaS9RnBP16rW5Pz8EYneHzDVk=
Subject key identifier: E9:06:DB:96:C1:40:11:BF:BB:11:B0:DA:18:CF:D6:8A:30:48:62:AD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1086704CC05B1303DC4500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 73.248.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:86:70:4c:c0:5b:13:03:dc:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=41aece30-f49e-42e2-b26a-c9afd65b26d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:03:c7:08:d9:66:ea:21:1f:fe:e6:5d:c0:
5e:64:d6:27:2c:a9:f5:4f:42:94:ab:e8:16:04:d7:
f7:09:e4:ab:0a:98:f7:5c:a1:b4:41:2c:3a:dc:28:
a8:02:36:a4:6d:30:de:e5:9b:19:d8:39:d0:59:92:
d8:87:d9:c5:87:71:34:ce:fd:da:06:d9:2a:59:77:
f6:a6:9a:84:d5:11:6c:d6:f5:34:23:4d:37:6a:df:
50:c5:65:08:4f:10:95:54:0d:a0:a1:6f:e7:21:82:
c2:70:89:14:fa:3b:ec:d3:a7:04:ad:85:bd:46:89:
d2:36:d2:11:3c:b4:98:bb:34:09:7f:65:89:f6:0f:
35:e8:e6:46:3d:fb:ec:00:09:a6:21:32:ba:80:39:
45:1b:ed:7b:54:f6:7c:63:eb:b6:ff:eb:ef:c4:b3:
2a:c1:06:87:8d:bd:17:75:e8:bd:ef:63:d0:12:c3:
03:d7:26:8c:2c:76:f2:36:23:5b:ff:99:b7:cf:e9:
e7:93:0b:4a:46:39:d5:f4:cd:a5:80:88:99:cf:43:
a9:92:2a:88:97:83:6c:a7:29:3e:9f:91:56:16:40:
d6:dc:f6:3f:5e:55:09:d6:22:39:4a:2c:9f:12:da:
0f:f1:ce:3a:d6:b2:bc:09:07:d2:3f:b8:0b:a8:8a:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:DB:96:C1:40:11:BF:BB:11:B0:DA:18:CF:D6:8A:30:48:62:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.248.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:f9:22:1b:6e:f5:4c:00:36:d8:b3:16:02:f8:ce:25:01:5e:
03:a9:f3:f4:78:7e:cd:e2:40:35:b7:ef:ce:19:d6:d2:59:90:
47:e5:d8:79:5d:70:9d:16:4e:b6:56:ab:8a:71:12:13:60:3a:
6b:24:6c:4f:54:63:02:66:f5:ea:84:fa:c6:36:51:d3:2c:06:
40:2c:16:bf:de:a3:ec:b3:6e:86:f0:1b:3d:cf:76:7c:38:8e:
ed:c4:fc:55:cd:fe:1b:61:31:bc:7c:0f:43:9f:7d:fe:d3:be:
ab:e2:18:7d:bf:1e:4d:cc:7c:71:74:a5:cd:ec:d7:b2:d8:55:
ef:8e:6e:9f:be:8d:7a:b7:52:2a:10:41:83:4f:3f:c2:e3:18:
de:2c:14:c3:75:85:74:66:42:4c:c8:52:0e:bd:53:51:bf:ea:
29:ee:70:72:3c:bf:11:53:71:7a:bd:38:c3:f8:42:4a:0d:49:
98:7e:1a:a2:29:67:96:26:18:a1:5f:6c:48:c7:b6:d0:a5:34:
73:b7:dc:82:26:7e:a0:8f:7f:ec:43:40:82:42:a0:7b:e1:f0:
8c:25:08:e7:d5:11:ad:48:ea:4e:35:22:17:ae:2c:22:84:28:
d5:55:6e:1d:77:56:0c:7e:a9:06:8b:e0:43:3a:b0:08:fd:54:
c2:aa:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:20 2025 by rpki-client