Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dec33cb-a852-37fd-97be-6751ed6a0cb2.roa
File: 0dec33cb-a852-37fd-97be-6751ed6a0cb2.roa (raw, json)
Hash identifier: cztJZ5tqz8BVphov2/pqWkwa8tu5ndF9yyIFY3G9+Cw=
Subject key identifier: D7:97:9D:2B:49:A7:19:9B:EC:1B:BF:6B:09:86:25:A7:E0:05:EB:A1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C48603DA50F0167A77600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dec33cb-a852-37fd-97be-6751ed6a0cb2.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 73.59.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:48:60:3d:a5:0f:01:67:a7:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=4b988d49-141c-43af-847a-c0c3d5443a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:75:bd:78:7c:f7:78:e4:74:9b:c2:d2:32:
cc:66:6e:48:48:d2:9b:44:92:e8:48:2a:1c:76:5d:
83:57:af:71:47:27:33:c4:db:54:ea:5e:ba:7b:70:
a6:e0:d2:b1:78:07:f3:bc:31:f1:63:9f:38:f9:30:
fa:f5:2a:6e:0b:a8:2d:da:9c:07:da:fe:81:95:3a:
ed:07:fb:36:a8:a9:89:d8:c7:ce:8c:b9:0e:5a:88:
b5:ec:42:69:6c:e8:57:e2:9e:6c:f6:ab:f8:c0:6a:
7d:66:0d:6e:2c:3b:40:e2:d7:7e:cd:21:04:2c:a8:
ee:5c:7a:a3:67:7d:63:9c:d4:23:a6:f4:85:20:a7:
b7:0d:15:2c:08:b1:e3:ff:2e:dd:de:51:98:3d:b1:
a0:60:94:e2:fb:f6:e4:dc:87:12:0c:82:24:c5:b6:
68:d5:30:06:b5:b3:2b:e9:dd:59:13:d8:f3:fb:84:
48:52:c4:3b:02:79:27:49:db:d8:37:1b:ff:79:04:
bc:69:c7:ef:bd:8e:5d:a5:8b:6e:7d:05:91:99:9f:
6e:22:f1:b6:79:de:1b:8d:ea:57:33:78:3f:e1:62:
7d:20:02:b5:f2:4b:29:18:07:e0:24:b4:74:cf:20:
89:d4:f4:30:c0:3a:c8:b3:53:45:29:fc:18:75:84:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:9D:2B:49:A7:19:9B:EC:1B:BF:6B:09:86:25:A7:E0:05:EB:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dec33cb-a852-37fd-97be-6751ed6a0cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.59.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:97:30:0b:f6:8f:68:33:38:4e:32:1c:34:fd:80:61:00:b0:
5c:c8:9b:aa:49:27:c9:b0:f4:d3:de:50:47:09:e6:98:4e:dc:
18:d3:23:8e:ab:73:2c:a4:24:b6:b4:f3:6d:3a:e3:b9:c1:fc:
17:e3:c3:ca:ae:6c:f0:07:70:aa:09:eb:b2:21:a8:2e:a0:cd:
03:f3:28:1f:1f:57:06:e3:b5:3d:6f:0f:62:03:61:39:82:59:
62:3f:31:97:bc:82:ae:fa:30:d3:dc:54:cb:21:b8:31:6e:4b:
11:58:22:c0:91:26:44:93:23:24:0b:a4:b5:a7:eb:b6:cd:bd:
d3:b5:88:00:31:e9:27:5f:99:25:da:c9:a8:64:22:5d:2d:94:
ae:b6:05:49:d0:7d:40:33:f6:be:30:41:42:21:42:69:29:b0:
bd:f9:76:11:70:5c:a8:5e:7b:71:0d:aa:a6:9e:60:a3:8e:71:
2d:ad:8d:59:0b:fd:1f:d8:a3:78:39:6b:2c:07:85:5f:39:e5:
03:fa:01:29:5e:cc:f3:f7:e4:87:0e:b7:53:bf:a0:34:20:fa:
7e:d5:e9:14:30:ae:18:26:0e:64:13:1e:39:2f:15:b5:c1:ac:
7c:00:2b:c6:d3:41:0d:da:58:c4:ce:c5:ca:db:11:36:e4:55:
44:b8:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:31 2025 by rpki-client