Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb00ac02-0dd2-357a-a621-0cc50d61f222.roa
File: fb00ac02-0dd2-357a-a621-0cc50d61f222.roa (raw, json)
Hash identifier: TS1aExRRvLrXbciFtKqnzsy+zukeLdwoh7P3w1nDuJo=
Subject key identifier: CD:A0:AC:D6:9F:08:DB:33:1B:1B:2E:67:57:B8:17:25:1F:DA:BA:9A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12A8EC51F040555235AC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb00ac02-0dd2-357a-a621-0cc50d61f222.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.209.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:a8:ec:51:f0:40:55:52:35:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=86743f42-66f6-4df9-9b00-8bdbd1d917ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:3b:8e:07:2a:f2:3c:29:2e:f4:35:08:5d:
5e:24:0d:e3:c6:26:fd:58:03:6d:24:a0:87:b1:86:
ad:7e:3f:c2:fd:18:80:f5:6e:8f:64:fa:0c:51:3c:
a0:54:18:62:46:75:89:27:14:45:c2:d6:6c:55:4d:
54:89:53:93:0a:5b:82:17:ba:51:1e:97:f8:42:4b:
ea:73:7e:a6:c4:c2:d1:ae:58:5b:8b:4a:69:95:c9:
a3:c5:09:7e:18:d4:05:5f:a0:73:5a:a8:d3:50:56:
7d:e7:ee:fd:48:0c:30:77:af:f1:c8:48:b3:c9:68:
78:7f:77:99:ff:aa:8b:19:38:80:fe:fe:ef:88:47:
f9:2f:e1:36:01:58:40:df:ab:f0:be:06:fb:fb:12:
f9:c1:d5:d6:c0:25:f8:78:5e:c0:03:2b:c4:20:f3:
ca:d2:83:86:ab:4a:56:de:7f:8a:00:2d:e5:02:e9:
2c:84:df:f7:73:f0:15:80:5b:06:6a:f3:60:93:d2:
5a:60:07:75:f6:24:3d:e1:aa:6e:7f:15:ee:d0:1c:
a5:e0:36:0f:6e:1f:e8:73:66:8f:32:51:e9:cc:98:
2a:dc:0c:8a:bc:96:d8:aa:00:6a:e9:20:81:67:06:
2d:04:42:08:43:b4:28:77:4f:85:f4:6a:1e:b1:81:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:AC:D6:9F:08:DB:33:1B:1B:2E:67:57:B8:17:25:1F:DA:BA:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb00ac02-0dd2-357a-a621-0cc50d61f222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.209.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ce:37:f6:a1:68:c1:c7:bf:bd:85:ee:8d:67:d9:42:ee:b7:
9a:f9:c2:62:c2:e8:17:1b:e2:ed:24:8b:6e:e3:f4:5a:57:02:
39:cd:2b:2e:49:35:fc:46:07:2c:2f:7a:e2:1c:d5:1d:b5:f3:
a3:9c:b8:b9:6b:b1:3f:69:ca:6c:8d:77:ad:2a:48:f7:f8:98:
5e:d9:f4:48:73:7b:4d:fd:6f:45:62:85:a6:29:2e:9f:99:37:
66:c2:b6:f8:78:7d:95:72:6d:a8:12:8a:57:58:fe:ef:b1:76:
58:3b:b9:87:c4:24:a1:d8:d0:3d:6e:ed:ee:7d:fd:91:37:02:
e8:ba:ef:aa:70:d2:75:37:d4:c5:d0:c0:be:29:1b:7c:6f:01:
2e:54:e0:43:37:90:ae:76:b1:2c:26:11:d8:5f:c9:5a:d9:61:
bb:30:5c:22:f3:06:04:18:f0:e8:2e:e3:7e:91:f4:7f:89:20:
5f:bd:de:e4:1e:e0:3e:9f:bb:8b:a9:b4:fd:87:fb:bf:ee:bb:
f1:da:0e:de:4f:6c:5f:e6:5b:22:11:95:4d:36:45:63:e6:46:
d1:f5:32:68:0c:e2:71:ba:ec:0b:bf:ea:d6:27:c6:e9:76:c9:
8d:08:55:64:e8:c9:dc:39:b1:9c:fc:e2:2a:fc:80:51:b6:77:
c2:0e:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:33 2025 by rpki-client