Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2524e0eb-0433-3ad4-99c8-992718ffc797.roa
File: 2524e0eb-0433-3ad4-99c8-992718ffc797.roa (raw, json)
Hash identifier: agnp/Zf5pDshYBYK2D3vJrDtqxU8eRPPxWs/OH/zJxk=
Subject key identifier: 4C:B7:DC:FD:B0:9B:6A:53:3D:54:B0:98:83:C3:F1:BA:EB:DE:BE:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEAF837381DE10D2944940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2524e0eb-0433-3ad4-99c8-992718ffc797.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 73.98.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:af:83:73:81:de:10:d2:94:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0cd272cc-f51f-4c59-a262-746dba23ab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:ea:36:43:d1:b5:25:03:71:2a:6c:d1:a0:
82:ef:d6:f7:33:ee:0f:49:c8:46:24:40:c1:ea:51:
da:71:62:cd:8f:db:84:d8:f5:1a:17:7d:46:b8:05:
c2:ba:3c:06:26:24:3b:4b:e0:4b:ea:53:49:e5:51:
01:0f:12:11:09:b9:f8:74:5d:57:1e:a3:2b:e6:c9:
03:8d:1c:ce:d5:9f:3f:7a:79:48:fa:02:31:d0:c2:
f3:0f:05:83:a8:b7:0b:a8:fa:f0:d0:77:ba:c9:14:
f7:dd:7a:10:45:3f:c7:c7:d2:2f:14:bc:a3:4a:4f:
ca:ab:e5:24:90:ca:57:2d:4a:a8:46:2d:a1:a4:f0:
1a:32:25:96:fb:28:f8:fd:3f:d8:22:26:de:a9:ed:
0b:e0:1d:f7:36:82:17:20:29:7b:ac:30:47:33:ef:
52:90:96:3a:88:e1:ed:ec:9d:61:0c:2a:aa:8f:07:
9b:d8:8b:84:97:38:0d:29:17:f4:8e:41:9d:ac:f6:
43:d0:26:98:6d:50:84:2d:c9:02:f1:19:5b:f5:19:
2c:85:5f:76:8e:8f:da:6b:63:d2:8e:9a:6e:f1:c6:
31:ca:1b:71:13:31:8f:15:ba:74:b6:1e:68:21:a9:
b5:9a:af:ac:2c:1f:08:16:5c:6a:8d:3e:93:3f:61:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:DC:FD:B0:9B:6A:53:3D:54:B0:98:83:C3:F1:BA:EB:DE:BE:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2524e0eb-0433-3ad4-99c8-992718ffc797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.98.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:68:c7:6a:99:03:a5:b9:e9:98:ff:63:7f:59:92:20:e0:88:
94:32:bb:9a:81:53:ef:a3:71:fc:49:f2:1a:6f:e2:10:65:e2:
5f:fb:ea:1d:1f:c8:21:3c:cd:40:84:b6:bf:d1:3a:37:0f:99:
d8:a1:d7:81:78:72:79:6c:4c:fc:dc:a4:33:89:64:da:94:e0:
e8:9d:62:0e:2c:ac:e6:de:f5:d3:c2:c2:a4:8c:51:6b:7a:8e:
35:2e:f6:91:7f:6a:34:9c:3d:78:e2:6d:f6:c8:66:74:fc:ac:
fe:56:d1:a7:90:e5:4d:5f:d0:b2:7d:e9:11:de:b6:cc:ac:a0:
60:af:b6:7b:3f:34:bd:48:fc:4c:bd:cd:e1:fe:66:32:7f:b7:
35:61:08:f4:8f:96:6f:be:16:e3:a5:92:2f:de:e3:93:31:39:
35:47:a4:cb:64:22:87:fb:30:39:11:94:e5:60:82:3a:e4:9a:
c1:f4:3f:11:33:03:d8:09:95:b1:e0:b2:4a:9e:63:fb:a7:e3:
88:17:14:ce:86:33:05:a2:c5:40:b4:13:26:5f:7a:dc:05:05:
d3:27:d8:6d:7e:e7:89:d2:0c:c8:82:8f:58:b3:b6:af:98:2e:
ce:77:22:a8:3c:7a:b8:42:6b:37:13:c2:8e:d4:7e:47:0e:99:
a9:c1:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:39 2025 by rpki-client