Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d948d86-1b8a-32ff-8942-3634591f1f2a.roa
File: 2d948d86-1b8a-32ff-8942-3634591f1f2a.roa (raw, json)
Hash identifier: fik5aE3ldLUzHXOtFoIxRfF/+ZKDFAsODO+ftV8p/T8=
Subject key identifier: 01:64:37:FC:81:5A:EA:01:F3:85:3C:4A:8E:54:3C:77:F3:CE:B6:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEEEAFF80340EE2A6D4680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d948d86-1b8a-32ff-8942-3634591f1f2a.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.248.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:ee:af:f8:03:40:ee:2a:6d:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7640e8da-b78c-4fb0-8234-b9d23bf0f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:8b:ce:bb:8f:6f:99:62:68:f5:e8:53:98:
b9:24:c2:67:d5:0d:0e:72:b7:c0:84:a6:d1:07:7c:
51:de:d3:6f:ad:07:a6:6d:db:b0:0b:ed:9d:1f:cf:
a5:9c:58:b6:d7:87:ce:2b:3c:f7:5a:8f:3e:5e:63:
5f:76:89:ad:03:71:70:7c:ed:ff:d6:be:51:9a:3f:
b8:0f:97:87:c5:ed:d1:3a:bc:e5:c1:a7:c8:c2:2e:
ee:d6:5e:ee:f6:c2:19:eb:91:5e:25:01:f8:75:36:
b3:3b:da:94:45:3e:cd:b7:a3:b9:b1:3c:b2:8c:71:
87:8c:f9:26:d2:2f:10:b4:c3:8f:f1:bb:9f:85:81:
5e:45:08:ed:44:64:6d:30:df:38:1e:08:3c:c5:31:
fa:54:21:ca:08:fc:c7:10:57:0c:d6:aa:76:35:3f:
f5:f1:a9:24:49:bb:14:43:31:42:d0:d8:f1:dd:83:
c5:75:cb:9a:5c:f8:43:8e:fa:9b:6b:17:d4:b8:ab:
57:d4:f5:73:1f:e1:03:bf:ed:8e:89:12:40:a7:87:
93:d4:6c:73:de:59:b4:f9:7c:e2:32:43:a7:1c:13:
64:9d:f9:e5:68:89:a6:ac:42:1b:c3:59:4d:5c:26:
2d:d6:cc:69:19:d0:c9:76:17:7c:73:48:3f:18:2c:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:37:FC:81:5A:EA:01:F3:85:3C:4A:8E:54:3C:77:F3:CE:B6:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d948d86-1b8a-32ff-8942-3634591f1f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.248.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ab:4f:b4:d9:eb:c1:1d:da:30:a2:7b:11:fc:c6:72:f7:98:
c0:ca:5f:28:9f:75:5a:d0:2d:e6:89:63:1f:f3:bd:b5:8b:a6:
e5:4a:1b:37:4b:a5:bb:7c:3e:f7:85:f5:76:2e:f1:02:3c:99:
be:78:f5:fe:2b:ff:5d:bf:89:1f:92:78:b9:9c:d2:c6:3a:ce:
ad:52:c3:54:7e:04:d5:8e:61:88:69:8d:a5:fc:a3:78:d1:74:
a6:55:78:62:f8:ee:48:8c:be:15:d2:66:d5:ce:a1:f5:e5:2f:
9e:dd:80:fd:9b:89:ea:c2:b3:a2:39:fa:69:35:d1:61:22:0b:
c8:31:18:a0:6e:47:e1:ae:6d:e9:b6:2e:37:ca:4d:a2:e9:e6:
7a:c9:a7:32:5a:15:42:d9:2a:d8:17:7b:47:8e:9c:49:0d:da:
f0:3f:b0:fa:b9:ba:ba:3b:14:b7:50:38:86:55:8d:e2:67:08:
27:c6:a7:3e:a3:57:ec:50:a5:27:2f:82:26:83:07:4a:e7:09:
eb:9e:bc:36:8a:37:69:a5:ac:64:0d:a6:36:78:97:9c:be:d1:
7d:7e:60:b7:2f:ea:26:fe:3f:28:51:72:76:42:0e:27:ba:b7:
5d:a3:6c:7c:58:6d:4d:31:63:df:6f:fa:50:3e:c7:9b:6e:60:
98:58:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:19 2025 by rpki-client