Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3b809c-4d87-3f56-84ec-c13dc7fbfb25.roa
File: ca3b809c-4d87-3f56-84ec-c13dc7fbfb25.roa (raw, json)
Hash identifier: htDfxAuVj1P9P628aNnGMplwpr400f3e2E0LLvFhsgs=
Subject key identifier: 99:84:AD:3C:67:0E:AA:9D:E7:30:17:46:2B:2A:A7:A4:D2:00:DD:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B0676612E96D327756180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3b809c-4d87-3f56-84ec-c13dc7fbfb25.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.218.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:06:76:61:2e:96:d3:27:75:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=20f4653b-688d-4ba3-ab5a-6f5bbe0ac1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:7c:a4:ed:2b:90:9d:96:e2:02:1e:d8:2c:
b9:a7:7f:67:e6:97:86:ff:6f:8a:d1:ac:10:51:10:
dd:97:c2:99:7f:49:6b:72:c9:a3:54:3d:dc:bd:6e:
09:e5:0f:ba:aa:0e:98:0d:ad:94:92:b6:97:2c:dc:
d0:16:c1:82:ad:30:5d:d3:67:da:21:22:9e:a6:41:
10:9a:c8:59:f4:77:10:5b:47:96:ff:17:64:0d:96:
5c:cb:b0:46:ac:89:41:21:7f:a3:ff:cd:51:8a:b6:
5e:8f:de:01:1a:cb:81:c9:d6:36:f1:46:43:2b:be:
ad:a1:6c:a2:57:54:37:b4:94:b5:45:be:ae:34:53:
ba:a4:f1:fa:a8:66:76:4e:7d:90:c8:f4:21:53:b8:
08:52:00:cd:94:e0:be:09:3c:93:d4:e6:31:86:bd:
c4:71:bf:4b:84:74:78:db:6b:2c:db:a0:ce:59:97:
b9:68:b7:5d:32:fb:2d:94:f8:21:a3:08:30:e9:6a:
8b:71:23:18:f2:29:92:8b:45:71:91:1d:6f:10:24:
09:81:50:c6:fd:c1:aa:d2:0c:c7:ce:1c:bf:8c:de:
d5:24:b7:43:1c:2d:20:47:71:4b:08:70:9d:fd:2f:
a4:03:68:49:20:12:9e:86:cf:e0:fe:d5:4b:48:b9:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:AD:3C:67:0E:AA:9D:E7:30:17:46:2B:2A:A7:A4:D2:00:DD:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3b809c-4d87-3f56-84ec-c13dc7fbfb25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.218.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:96:f0:ff:56:88:20:5c:1d:5e:2e:77:48:5a:15:09:7f:b9:
34:65:a3:1e:6c:0e:73:66:1b:53:cf:10:96:84:e4:84:77:77:
60:1e:07:1a:cb:83:6d:47:dd:e8:59:0b:e2:d8:16:a4:2f:3b:
2e:4b:66:75:e0:97:c9:08:1c:f6:4d:e9:ee:fe:6a:eb:9c:3c:
f4:61:9f:d2:25:c9:bb:45:5f:8f:74:45:fb:8f:6f:1e:bd:70:
ec:de:10:cf:f0:8a:ee:b0:5c:29:1f:50:be:4d:91:8c:93:62:
8f:0d:60:aa:c0:13:30:b9:c2:a7:a5:7f:b4:ff:37:39:9c:43:
32:ed:1b:34:bd:13:81:30:71:84:89:0d:4d:b2:80:ec:64:b7:
6d:63:74:2b:1a:76:e9:2c:a6:46:71:eb:b0:69:f6:0b:3e:b2:
47:94:34:42:86:19:15:5e:b9:c2:5f:47:69:6c:c2:73:c7:dd:
11:2e:51:8d:61:71:fc:f9:0d:6b:7f:0d:98:30:b1:f5:9d:99:
b3:cb:91:21:13:f5:2d:59:e6:a4:72:ac:e1:96:18:ba:7f:20:
05:e0:52:f8:06:e0:65:71:77:83:f1:0a:b4:bc:1c:f9:b2:3e:
a5:c8:95:5d:e1:64:f5:9a:26:21:2f:cd:a7:4c:b2:15:40:16:
83:fe:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:36 2025 by rpki-client