Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e67c7942-6332-3a53-aa35-6d88bed2331a.roa
File: e67c7942-6332-3a53-aa35-6d88bed2331a.roa (raw, json)
Hash identifier: ZuLD4Ej2OVnnfYBPSV1l6ZdKwDFXW342i8sm7OwWvIQ=
Subject key identifier: 15:7A:04:CC:91:65:BE:2D:0E:E0:A2:76:EB:E0:CA:83:C0:CA:78:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848116FDC1BE4D5F3F47E9BFAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e67c7942-6332-3a53-aa35-6d88bed2331a.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 22258
IP address blocks: 73.2.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:dc:1b:e4:d5:f3:f4:7e:9b:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=3680f857-65ce-47ba-ab8e-dc0fe477b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:10:58:3a:4a:bb:22:f0:03:e3:e0:8c:8a:
94:c3:63:87:02:62:b8:b2:1e:2d:6d:6d:b8:e4:08:
d1:4d:81:65:c0:22:6b:c4:07:58:35:2e:a2:93:95:
55:9b:3e:5f:bf:0c:d5:56:9d:88:e2:f7:6a:63:c4:
39:91:b9:05:d5:6d:f1:f9:02:07:2e:cf:7c:91:39:
95:6b:03:2b:77:c3:55:09:6e:07:af:1e:5c:3f:3f:
07:a2:a6:20:1f:bb:df:5b:71:a7:0b:97:17:da:28:
22:1b:47:bc:f5:36:69:ea:89:c9:58:96:65:38:d4:
f9:04:fd:ee:5d:8c:51:5e:e2:cc:61:d3:13:01:b9:
07:32:8f:aa:8a:d4:19:6c:02:4f:7c:06:0f:65:ba:
0d:ec:90:04:d5:8c:36:31:6b:51:8d:24:2f:be:f5:
05:6d:d1:36:a1:2d:e7:03:26:13:4c:84:86:75:3f:
ff:c7:b2:4d:6e:46:64:c4:5c:c2:b9:b2:24:88:21:
58:16:05:dd:82:db:90:d0:6f:b6:65:98:2c:de:7d:
2f:00:4c:91:7d:8c:8a:ad:46:78:df:b7:aa:b5:17:
c4:29:fe:2c:04:8f:1b:e5:c6:06:46:b5:14:75:7d:
c4:3e:3a:4b:ff:17:13:58:89:ba:02:4f:3c:0b:dd:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:04:CC:91:65:BE:2D:0E:E0:A2:76:EB:E0:CA:83:C0:CA:78:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e67c7942-6332-3a53-aa35-6d88bed2331a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.2.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f1:ad:4b:d4:d4:bd:8b:20:49:eb:54:81:4d:79:21:64:19:
8f:a7:b0:e5:23:fa:9a:c6:47:36:00:94:42:e5:f1:f4:75:ca:
42:f7:54:fb:30:ce:79:5c:5d:36:9a:05:b4:25:69:2e:21:c7:
f5:fa:39:20:3d:2e:49:e1:8e:bb:e0:f4:d8:36:2b:72:55:d5:
d7:1a:36:91:9b:bb:c3:65:c0:1b:0b:36:fe:18:82:ac:e0:77:
7c:1a:ea:c8:1f:b0:3a:f2:5c:aa:bb:de:32:41:85:3e:63:e1:
ef:0a:e9:e3:42:69:99:1d:ba:a3:0e:0e:84:bf:d9:54:f0:10:
b4:c3:c3:f2:bf:60:97:f8:bb:58:d6:7f:6f:6d:9b:0e:72:2b:
f4:be:91:02:48:4a:51:e5:3f:b2:0b:86:18:c3:19:01:8b:c0:
39:2f:6c:a4:9f:11:20:14:71:ea:57:95:7d:18:39:10:f6:3f:
42:e2:7c:19:4e:2e:99:0a:18:da:0a:62:cb:7d:f0:15:92:e2:
98:fb:d3:c2:56:2f:48:ef:4b:26:3b:ad:3c:08:84:b5:20:2a:
8a:77:85:2f:90:c9:c8:ec:73:77:93:12:95:a4:7d:77:83:80:
cc:69:a3:ba:83:e4:9f:2c:db:65:52:81:ee:52:74:ce:6a:43:
f1:13:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:42 2025 by rpki-client