Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac8c52a1-e685-36d9-93d1-80ab3ac72ca3.roa
File: ac8c52a1-e685-36d9-93d1-80ab3ac72ca3.roa (raw, json)
Hash identifier: oIJ5AREPQCkJ4+UwNGrGpjcVofgcE8+YDx1z+GMJZy0=
Subject key identifier: 52:24:2A:73:0E:28:37:C1:DF:5D:01:13:04:F5:37:7D:FC:51:57:86
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1114EE49D0A2475AA78000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac8c52a1-e685-36d9-93d1-80ab3ac72ca3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.247.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:14:ee:49:d0:a2:47:5a:a7:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=24b5901f-b936-43e4-ad99-c9c94829d91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:fc:25:96:0a:d8:aa:57:54:d2:02:e9:af:
3d:2b:86:1d:cb:bd:23:95:f2:6c:2e:0f:51:e6:a3:
ed:13:c5:78:ef:07:7c:cf:95:74:d9:07:0b:67:19:
d7:13:b8:ca:5b:41:f0:95:56:02:6c:cc:74:df:ff:
ad:60:c1:e1:32:9d:0e:81:c4:b1:30:2e:9d:08:ef:
51:e9:6d:6b:72:a1:3d:c8:ec:24:09:ae:05:19:86:
6e:b3:68:c6:b4:22:0e:ce:b8:33:08:db:71:79:54:
03:85:71:d0:2b:31:67:e4:f5:78:43:13:47:0c:7b:
63:47:84:27:60:36:10:3a:1c:99:81:39:da:5a:35:
cf:71:67:34:84:89:33:73:cc:16:7f:ac:41:b4:8c:
4e:7e:d1:66:98:90:ca:d0:b6:cc:4a:c6:78:24:6d:
fb:0a:c0:6a:28:68:57:57:61:a9:1f:33:9a:ac:79:
25:ec:0f:6a:d6:b9:61:61:9e:e9:35:9a:c4:ee:0e:
21:05:5a:fc:af:dc:fe:3d:c1:dc:01:4c:8d:96:be:
6a:e7:ef:a8:4b:17:04:cd:46:7a:d5:3a:72:71:6d:
57:5c:1b:13:68:62:69:78:7b:82:15:0d:76:2f:3c:
ca:20:54:4d:a9:d5:8f:fc:38:af:79:37:ea:eb:c6:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:2A:73:0E:28:37:C1:DF:5D:01:13:04:F5:37:7D:FC:51:57:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac8c52a1-e685-36d9-93d1-80ab3ac72ca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.247.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:35:f9:60:66:51:20:8d:b5:1e:20:3e:3f:e0:fc:bc:72:ff:
99:eb:1c:25:62:9e:72:89:6d:a0:18:7b:6d:2e:0a:90:aa:26:
2e:72:91:01:68:91:46:3e:8a:c2:4b:96:66:92:0b:f3:61:b9:
72:fc:a0:ab:05:44:a1:48:56:42:40:f8:8a:6f:91:85:af:dd:
94:50:b8:0b:45:30:79:42:e3:2f:45:31:5f:dd:7f:e4:33:7b:
93:aa:62:7f:ac:36:4f:38:84:e1:b9:5b:fc:1e:ad:91:58:5e:
a2:83:52:85:79:59:6c:56:8b:32:e4:88:cc:85:e2:ac:0f:57:
5d:0e:fd:45:48:d3:89:d9:23:7c:fd:80:30:fc:59:29:85:b4:
c3:f6:7a:0b:46:56:51:ca:40:b6:d6:9f:bf:00:44:03:f1:aa:
10:2c:3b:ba:18:36:75:3f:88:1e:1a:26:84:ab:a8:58:33:4e:
36:5e:69:db:32:97:de:14:75:5e:20:fc:e6:71:5e:60:23:ed:
85:c0:37:46:77:02:6e:9b:a9:d7:27:1b:f6:71:5a:3c:1a:22:
e2:60:1a:4a:7d:56:9d:2e:9b:c2:93:42:85:5d:7e:4e:27:7c:
2d:62:69:e5:bb:ae:ec:f3:ca:4d:be:ca:d9:a8:89:e9:99:b7:
57:6c:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:25 2025 by rpki-client