Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e6030d8-82d2-30c2-8dc8-e514318543a5.roa
File: 8e6030d8-82d2-30c2-8dc8-e514318543a5.roa (raw, json)
Hash identifier: bFGGfTyL+d6VkxGyhM7FYEsaGbAxuPPD5Iqt22jyTl4=
Subject key identifier: 40:DA:D0:AE:37:E6:3B:67:8D:FB:BB:FB:41:70:A5:78:3C:93:05:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B262654457A20EF034D3F200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e6030d8-82d2-30c2-8dc8-e514318543a5.roa
Signing time: Tue 28 Jan 2025 17:39:02 +0000
ROA not before: Tue 28 Jan 2025 17:39:02 +0000
ROA not after: Mon 28 Apr 2025 16:39:02 +0000
asID: 33491
IP address blocks: 73.168.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:62:65:44:57:a2:0e:f0:34:d3:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:39:02 2025 GMT
Not After : Apr 28 16:39:02 2025 GMT
Subject: CN=c4888d92-e448-4c2d-a67c-e0cd8d9fb152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:8d:e8:40:39:6d:9e:4b:63:cd:1c:3b:1d:
a2:fd:5f:75:ef:10:45:0c:1b:6b:80:c4:67:2c:fd:
bf:2f:c0:48:7d:1c:d7:11:aa:fe:53:0c:cf:d5:c6:
00:5b:88:2b:db:1e:b8:a5:01:c3:41:df:1a:61:1c:
bb:5c:06:e6:fd:02:44:1e:aa:d2:fb:64:6e:19:81:
53:db:a2:a4:6f:7f:6b:93:03:d1:ec:1f:b0:06:c1:
02:cd:45:5b:65:92:8a:eb:7d:69:09:3e:09:76:1a:
f7:e7:e1:08:d8:78:e6:d2:24:3f:8a:a9:6d:26:19:
40:3c:13:0d:fb:1b:24:2c:bc:2a:c3:fd:dc:e9:2d:
83:f4:08:51:02:04:94:05:f0:bd:86:8a:dc:5b:8a:
2a:1c:e2:c9:5a:e5:64:78:19:fc:5a:19:91:f4:9e:
e7:d0:a6:49:f6:e7:61:09:e0:7f:da:b7:23:f9:dd:
27:12:5c:b5:3e:f6:09:b9:36:9c:b7:65:da:b0:ba:
98:1e:82:c5:87:f6:c5:dd:26:06:09:85:25:a7:28:
f3:1c:aa:49:8f:f7:3e:2f:9d:12:23:45:a9:34:2b:
ca:e7:73:40:d6:cc:8c:b7:fb:53:0d:fa:6f:f0:b6:
d3:8e:60:90:15:6d:8b:dd:df:76:e3:19:53:62:45:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:D0:AE:37:E6:3B:67:8D:FB:BB:FB:41:70:A5:78:3C:93:05:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e6030d8-82d2-30c2-8dc8-e514318543a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.168.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:fb:93:f7:bf:6e:48:06:42:48:38:2b:20:d2:d5:9d:82:d0:
a0:61:04:60:78:c1:6b:38:65:2f:d9:b4:13:13:f6:33:3a:5a:
27:fe:98:3e:dd:55:b0:ac:dd:0b:5c:ab:72:02:4c:8a:d7:73:
08:4e:d9:c4:98:d1:73:ca:be:ea:66:6e:19:aa:13:56:cc:54:
95:8e:64:74:43:94:51:a8:f6:4f:7e:8e:fa:fa:cc:f0:20:19:
a3:84:17:42:f3:de:16:de:58:0f:08:45:8f:5c:1d:e1:11:95:
f0:03:e9:ca:f3:6a:a3:8e:45:29:97:a1:9f:50:56:9e:e7:93:
23:9c:b4:6d:c6:0b:1e:23:ca:a7:8b:92:cc:4c:69:19:60:22:
43:13:c4:0e:8c:47:22:d8:b9:1a:60:24:6c:94:a7:ea:a6:36:
22:ea:7d:e7:f0:b8:5e:9e:e1:9f:6c:7b:a9:dd:60:a1:ab:dd:
53:6a:6f:14:da:24:ed:47:da:23:10:d8:37:57:25:d3:cc:3d:
b2:98:80:a5:30:ba:33:fb:64:ed:62:a4:e1:c6:6c:b6:da:c6:
dc:ad:b4:c5:86:00:68:c7:12:84:77:94:01:c3:44:b9:e2:c7:
4e:d5:a1:7c:0c:ff:22:f7:29:7c:f7:85:6b:fb:a9:f7:4a:bc:
ed:39:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:29 2025 by rpki-client