Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb68f20-a951-3aa5-b3c4-05a37992c6f7.roa
File: ceb68f20-a951-3aa5-b3c4-05a37992c6f7.roa (raw, json)
Hash identifier: J0GLjFr3SqOPT+vKl41viZtXEeRl5YbYqeLApBhmWv0=
Subject key identifier: D5:14:B8:F0:ED:AF:59:70:80:5B:55:A1:7D:62:5B:59:5B:F0:83:E1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E757F0F78331AAC9AB640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb68f20-a951-3aa5-b3c4-05a37992c6f7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.249.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:75:7f:0f:78:33:1a:ac:9a:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f4bf38da-4e44-41fe-8668-10a58c4d84f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:a9:01:56:f3:7e:8b:e7:86:25:5f:38:d7:
4c:fa:d2:00:a8:38:16:08:bd:97:f8:30:fc:9a:61:
4e:3d:39:54:4c:70:a3:ec:4f:a5:5f:f9:0f:42:d7:
ff:76:ad:a9:44:73:00:ec:63:5c:23:dc:8e:3d:9f:
4c:0c:e2:5c:82:92:c2:1e:bb:e7:e6:d7:d4:1e:63:
68:82:81:62:4f:2e:7e:f8:e2:61:c7:bc:7f:3f:f6:
63:6d:36:8b:cf:f6:c4:bc:96:71:0e:98:5c:16:02:
83:8e:7e:68:e7:43:a6:00:fc:b1:82:3b:8f:b1:b6:
06:2d:be:9e:4a:c0:09:b5:87:96:d6:ac:d2:14:fb:
40:13:1e:b2:e0:7b:36:6a:81:da:eb:cb:a3:06:be:
1b:b3:50:59:8d:93:61:94:1e:1c:7a:82:f3:86:d9:
a8:ee:ab:c7:cb:5a:80:c2:60:46:2e:64:17:5e:81:
0c:d8:92:f4:4d:8f:3f:75:3a:7b:d5:73:93:53:7c:
26:f9:37:2d:7c:ad:b9:03:0a:2a:e5:4c:6e:55:aa:
86:66:01:8c:43:e6:52:b4:dc:d5:23:38:ad:1f:b6:
09:3b:6e:98:2e:49:a4:33:4b:bc:97:00:0b:42:ec:
a1:4e:22:43:9a:45:39:7a:00:dc:70:e2:91:93:cc:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:B8:F0:ED:AF:59:70:80:5B:55:A1:7D:62:5B:59:5B:F0:83:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb68f20-a951-3aa5-b3c4-05a37992c6f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:09:65:09:90:a1:b3:98:b4:b5:11:1f:b8:91:0b:cf:e4:62:
39:3a:10:61:e9:ff:c6:48:70:6a:9d:f1:86:ea:2d:fd:b6:6b:
3e:24:da:ee:06:91:a7:cd:c4:6d:23:2a:95:9e:09:86:c0:74:
1e:72:eb:ab:15:34:a4:cc:7b:47:75:aa:45:6e:b0:9b:20:55:
f9:45:63:e5:f4:99:90:ae:34:39:3b:d8:27:13:ae:16:d7:50:
5f:52:11:c9:22:1a:dd:7a:1c:fb:f3:e3:91:ba:9f:a5:b4:50:
48:fe:83:d7:0b:41:a5:2e:c9:59:a1:18:79:a4:b0:b0:e3:02:
d1:06:45:bd:b9:be:60:e2:2f:9c:d3:d5:b8:9c:bd:87:ff:8b:
f6:e7:9d:a3:b3:09:ca:cc:2e:b1:0f:46:d8:21:3e:f8:24:f8:
de:fa:b9:f7:3c:30:d3:85:bb:8b:3f:a5:2f:34:39:44:9e:de:
a6:1d:30:37:01:be:f1:8e:81:1f:4e:22:cf:83:51:b5:d3:ae:
3b:a5:fc:33:90:36:87:51:86:c3:40:bf:91:d9:a3:91:02:1b:
04:54:2c:d0:de:dc:8e:39:b3:a2:2c:0a:86:44:db:c9:a5:42:
65:77:3f:9a:8f:93:42:8c:5c:90:ca:08:8f:94:6a:f8:03:79:
d4:b6:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:43:22 2025 by rpki-client