Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/befe655e-c2fd-30be-a1a1-7ff7f2ea4089.roa
File: befe655e-c2fd-30be-a1a1-7ff7f2ea4089.roa (raw, json)
Hash identifier: 7XrWUtTvcZflA+BMSxEdcXEKfikrI8V+/CZttnjtXF8=
Subject key identifier: D4:7F:D6:5E:56:97:94:D7:1F:32:D3:63:87:A7:31:96:A6:A0:5A:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11A0062999F5B596868170
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/befe655e-c2fd-30be-a1a1-7ff7f2ea4089.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.231.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:a0:06:29:99:f5:b5:96:86:81:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=064e8c80-8f29-48e4-a299-ca0de8a057aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:98:47:f2:49:b2:0b:6f:dc:4c:03:c6:0f:
e6:8f:c5:5d:0c:7b:b1:7c:c2:18:44:cd:ed:cf:ec:
0d:ef:5b:f6:e6:1d:64:79:2d:24:e8:29:be:30:f8:
70:db:3d:b4:08:d6:99:af:da:2c:23:0c:6f:57:03:
75:50:d1:54:fd:ea:b3:40:68:70:a3:98:63:2a:b0:
27:d2:04:6f:eb:b8:75:80:ae:0b:73:90:27:a1:fc:
53:76:6d:db:53:54:d9:95:08:38:b8:3d:e0:e2:c9:
ab:0f:24:af:d5:80:7a:13:1f:65:75:68:9b:7b:10:
e8:47:76:10:ff:47:5b:24:6d:e6:59:7b:08:68:1c:
74:0e:38:dd:73:e9:fc:31:b5:83:c9:e0:f2:10:1a:
1f:3a:54:e6:4b:64:e4:2a:9d:ac:7e:83:1d:64:47:
eb:1c:17:35:a5:2b:77:18:a5:a8:a8:20:2a:b2:9a:
d4:52:32:20:4d:73:be:b9:5c:68:7c:3a:47:99:2c:
5c:cd:f0:d7:f1:c6:2e:79:1d:b1:e3:bf:f3:22:11:
3c:4b:ae:af:c4:45:45:94:4d:71:ff:49:81:84:49:
41:e7:c7:7f:db:8c:4a:61:7b:7e:60:fc:24:7b:88:
b1:cd:23:13:27:e9:de:c6:01:ea:c4:c9:2c:be:93:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:D6:5E:56:97:94:D7:1F:32:D3:63:87:A7:31:96:A6:A0:5A:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/befe655e-c2fd-30be-a1a1-7ff7f2ea4089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.231.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:57:4f:4f:d3:f5:4e:c6:84:33:e7:ec:b8:65:83:f2:4f:47:
4c:85:1f:9e:6a:41:a9:50:ae:be:ea:03:79:dc:74:92:a4:cb:
77:1d:a8:39:86:11:0f:98:74:e2:98:cd:45:70:be:1b:ce:d0:
ef:3f:f7:e8:94:9d:43:81:37:a7:5c:d1:40:ba:cc:97:6a:08:
85:2b:00:49:db:b4:d4:ae:c2:6b:9c:12:00:e4:3c:b9:c8:e8:
18:02:28:77:a1:66:af:28:f8:ec:bc:1f:0b:e2:ec:fe:ae:85:
ec:b5:ee:53:5e:b3:f8:a4:f9:1c:c0:32:b7:6c:af:64:f0:e9:
81:55:86:30:3b:4e:b0:a0:c0:ca:31:af:14:d4:f5:35:ee:2d:
48:64:46:ee:d2:af:f7:dc:09:5b:3d:fe:7a:f3:b1:95:da:b6:
ec:04:1a:99:df:60:99:16:c9:fe:0e:17:67:22:74:38:d4:e5:
84:64:c3:6b:1f:22:73:51:ee:bf:2e:0b:bb:f1:9e:8a:f1:54:
6a:5b:d6:e1:81:dd:95:65:e2:fa:df:20:9e:cd:75:f2:e3:35:
cd:6b:66:db:6e:c4:25:e1:ab:a2:d3:72:a4:90:f1:f5:ef:4b:
a0:88:d6:69:cf:ed:2e:eb:11:40:e5:8f:72:6a:4c:ab:b2:54:
ad:d3:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:42 2025 by rpki-client