Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aca596cc-c528-3300-be86-fa9e227d6151.roa
File: aca596cc-c528-3300-be86-fa9e227d6151.roa (raw, json)
Hash identifier: wSYdeBLb5bR72qoHuTBfDSGIllVbAhT6yYz9gfMdEJY=
Subject key identifier: 21:A9:97:48:52:E7:56:05:6D:01:DB:C4:CE:07:B8:B5:D7:2C:95:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B141CC86C0B96BF4AB040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aca596cc-c528-3300-be86-fa9e227d6151.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.249.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:14:1c:c8:6c:0b:96:bf:4a:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ce1046fc-b089-4951-8eac-ae47bc30e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:14:50:7c:c9:76:38:0f:b4:50:fe:68:40:
d5:a3:d8:4e:3d:51:4a:20:98:fb:5b:b4:74:a3:99:
c0:9b:55:aa:29:74:38:bc:f8:3c:bc:88:7d:5d:79:
5a:79:bb:cb:62:7b:d5:40:7e:62:32:d9:a9:12:bd:
18:91:e5:2d:9a:d8:a0:73:db:2f:84:d1:73:fe:22:
95:f2:65:ee:c6:c3:df:1c:28:5b:ae:9b:ba:29:e2:
82:bb:05:ee:e1:ba:1c:99:5f:ed:45:19:03:10:de:
6d:43:20:7b:1d:a3:b8:5f:cb:13:7b:78:51:42:c3:
73:f6:75:70:2a:3f:d1:95:d1:2c:9e:7e:ab:37:42:
0d:af:82:17:67:fc:66:22:37:e7:40:b9:c0:e2:24:
2e:32:2f:b2:18:d3:b1:df:69:72:76:c5:fa:5e:c4:
d5:f0:db:fa:a0:0d:0a:54:5c:67:ed:fd:f0:d6:17:
b0:57:ea:e1:23:75:6d:30:cc:7a:54:de:f1:e3:36:
1f:78:aa:20:41:29:60:3f:a5:cb:a5:93:5a:35:31:
49:4e:f5:76:cc:3f:c2:1d:05:0b:be:08:c2:8f:2e:
6d:b9:9c:b4:47:8c:2f:41:4f:27:03:0e:03:69:31:
94:13:34:5b:17:05:c3:81:53:62:ea:28:57:84:9b:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:97:48:52:E7:56:05:6D:01:DB:C4:CE:07:B8:B5:D7:2C:95:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aca596cc-c528-3300-be86-fa9e227d6151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:96:7c:70:ea:c0:5e:0e:49:09:b6:29:7c:b6:40:b5:ed:09:
37:02:12:fd:02:36:e5:6a:fe:9d:53:7d:6d:cf:79:93:28:11:
5b:36:dd:34:74:c9:1a:8e:0d:69:ca:5e:2a:79:0d:27:ed:09:
1b:56:b1:e9:54:8f:ce:f2:cc:da:20:03:9f:39:76:fe:32:b2:
08:a2:d6:8a:82:3d:56:0a:d9:9b:33:d4:9e:15:a5:45:1f:0a:
fb:c9:fa:d4:ba:00:f4:05:d6:88:88:a4:46:f6:5a:44:84:8f:
75:43:f0:84:f7:46:2c:0a:79:2a:94:a9:56:d3:4d:9e:ba:e0:
b7:a2:97:6a:52:18:32:9b:a4:f8:ad:8a:d0:b4:52:e4:2e:b8:
13:22:5b:eb:db:c3:70:53:24:df:78:c2:db:64:6e:a4:6e:d9:
f1:c6:e6:03:d2:11:b0:46:ba:90:f1:ca:ed:13:c8:20:5b:20:
14:94:44:72:76:ff:d1:cd:57:0b:1b:7d:03:d0:15:e4:b1:64:
00:fc:3d:39:09:e9:3f:75:6d:4c:ce:46:cb:eb:56:fb:92:be:
b9:b5:df:cb:6d:68:78:fb:a4:8f:50:16:df:95:29:63:49:02:
d1:a6:97:37:60:7e:3b:e5:37:ab:57:f2:fc:b0:42:cc:c0:9d:
89:fe:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:19 2025 by rpki-client