Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2844f60-3244-37dd-b279-198ae6c9faa3.roa
File: b2844f60-3244-37dd-b279-198ae6c9faa3.roa (raw, json)
Hash identifier: 7wG7teNVRB+Wvt/6JZQqWKsHac35xicnx3g1dlnulOs=
Subject key identifier: 46:71:BE:D1:29:BE:D8:AD:5A:29:65:33:5C:4E:50:65:AE:D7:67:A3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C129398432F5F3295037020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2844f60-3244-37dd-b279-198ae6c9faa3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.102.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:93:98:43:2f:5f:32:95:03:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b0b50762-62a4-455c-9b22-2fa08ddead23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:89:9d:ee:fa:f4:8f:7a:9b:88:d8:bc:22:
ce:97:a4:63:1d:d9:24:3d:85:86:17:08:92:ba:fe:
e5:6b:95:fa:f9:91:84:40:25:c1:a1:4c:a6:a4:ee:
12:5f:06:44:c4:f9:5d:cf:8c:cc:e0:a3:8f:e1:c5:
7b:b7:21:b7:11:7c:2a:99:4d:a1:24:b8:9a:20:d5:
8b:9b:ec:f7:03:86:01:31:61:72:a8:00:eb:fc:73:
5f:8e:62:7a:79:2e:67:e0:0b:83:a2:72:ff:1d:1a:
d8:de:5d:3d:d6:23:47:60:17:70:89:f7:f3:b5:79:
e1:76:60:2d:dd:f5:9c:5b:37:91:6c:47:8e:25:04:
f2:1d:81:7d:83:fe:3b:17:cd:71:24:9d:be:fa:29:
14:8e:a3:24:38:e0:1d:18:87:b2:43:3c:34:49:98:
48:0b:5b:8a:f2:26:63:c2:e6:65:63:90:7f:21:b9:
47:8c:f0:6f:09:0e:4e:92:a4:27:9e:89:51:8e:96:
df:a3:41:0d:10:1c:c2:f1:10:20:c7:59:08:5d:d5:
12:16:7a:30:1b:83:02:fb:c2:db:48:3f:9e:5c:77:
93:23:b5:d7:e5:b7:58:e4:38:d6:d2:c2:e1:9e:c4:
03:02:af:03:4d:1f:67:93:8f:03:94:f2:aa:dd:b1:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:BE:D1:29:BE:D8:AD:5A:29:65:33:5C:4E:50:65:AE:D7:67:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2844f60-3244-37dd-b279-198ae6c9faa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.102.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:8d:d9:1f:62:93:d5:2c:0e:c9:54:41:aa:73:a7:8b:d2:c1:
2f:dd:6c:b8:a0:94:d0:db:ab:b9:eb:dc:c6:76:c6:da:ab:8d:
45:73:b1:fc:29:b8:6a:d2:a7:14:ab:27:c0:d0:a0:63:01:66:
8a:c7:03:f2:19:75:a6:76:75:ac:b8:71:c9:dd:3c:f2:7f:f6:
be:a4:40:49:a0:67:93:fd:0a:ba:e2:93:06:1a:6a:71:a7:a4:
bb:2f:32:e1:eb:3d:8e:2a:ee:5d:4f:4b:55:eb:38:bd:bd:8f:
41:a1:af:0f:f7:d6:5d:27:02:df:c5:d3:36:82:af:9f:9a:97:
ed:89:12:3b:a0:25:7c:d5:0e:97:4b:ac:ab:30:78:89:28:77:
69:bc:bc:e0:1f:e3:11:a5:fc:64:65:18:c0:7c:0d:f8:9e:ee:
3b:85:02:72:ed:8c:2d:e9:cd:8e:91:b4:ac:58:7b:bd:ec:9b:
ea:01:c1:1b:a5:93:da:00:cc:98:05:5f:e2:47:96:79:8e:1e:
31:eb:5c:40:c1:bf:c2:a7:92:60:4b:c1:97:38:7c:4b:1b:2d:
8f:47:6f:0a:fd:96:9d:9c:da:5d:cc:1d:e7:57:b1:1c:65:ef:
9f:9c:78:61:12:4d:04:15:c0:44:85:20:9d:2a:2e:d9:59:e6:
d9:68:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:10 2025 by rpki-client