Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ddcefaa-c614-3eb8-8ffc-f5aefaa40192.roa
File: 3ddcefaa-c614-3eb8-8ffc-f5aefaa40192.roa (raw, json)
Hash identifier: zDbShM8CqTGYl6tg8Cxm7RIvQsDFOqbgTx3gV4uRQg4=
Subject key identifier: E5:1A:47:08:CE:43:A5:A7:CC:1A:A3:75:1A:41:99:68:C3:F1:50:23
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8B16BD427B00EEC2D0F78
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ddcefaa-c614-3eb8-8ffc-f5aefaa40192.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.68.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:b1:6b:d4:27:b0:0e:ec:2d:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=70cbc8c8-3797-4f5c-8f84-c341b3ca97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:ac:9c:f6:0b:6a:4d:dc:e7:0f:0b:ea:41:
42:d2:f1:6d:34:99:cb:45:98:c6:e1:69:60:72:c8:
86:21:a3:a9:83:35:42:06:00:2a:b0:95:01:97:7f:
4a:45:ac:6d:67:0d:38:05:97:09:6c:52:9d:43:2e:
5a:e4:f2:f0:a8:50:9e:11:dd:31:ab:66:21:b7:d2:
cd:91:ad:c5:87:cd:3a:9e:cb:9f:11:86:5b:4a:58:
ad:bf:81:6a:12:e8:8a:99:5d:98:f3:9b:3a:5f:c6:
ae:5d:95:09:14:9a:ee:6e:9b:06:b7:ec:80:63:4c:
18:d4:18:5e:55:3e:9f:3c:c2:8e:12:ee:d1:27:17:
9a:96:21:a6:5e:16:92:c8:11:9e:29:04:e2:b5:fa:
fd:ed:4a:a3:c2:57:fb:e4:a4:14:1c:cd:8f:b0:43:
3d:52:11:77:1d:56:4d:6b:ab:29:4a:f5:18:9a:d4:
9e:d1:2d:ba:2f:2e:45:21:16:84:b5:66:d2:44:6a:
6c:7f:cc:bc:76:0f:71:c7:41:a6:09:44:84:a9:86:
fa:57:b2:0a:8c:a5:ee:16:e5:81:57:8c:21:5f:09:
3c:52:6e:ff:7e:c8:99:f7:d0:e4:f4:6c:a8:ca:7d:
1c:50:ab:99:eb:d7:6a:c2:7a:fd:79:6c:3f:c7:57:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1A:47:08:CE:43:A5:A7:CC:1A:A3:75:1A:41:99:68:C3:F1:50:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ddcefaa-c614-3eb8-8ffc-f5aefaa40192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.68.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:39:24:13:ea:73:d3:67:35:56:4c:b0:51:b9:aa:1e:44:23:
55:fd:88:07:a2:60:55:f4:90:18:74:46:01:b9:83:db:f1:2f:
65:27:4e:fe:79:18:ac:65:79:94:b2:b7:e8:e2:0d:81:59:79:
ac:5b:db:80:fc:5c:a8:74:08:2b:00:eb:9b:ad:74:0d:ea:23:
61:cb:53:54:52:00:d5:7f:ee:32:a3:81:af:58:7c:f0:13:60:
de:2b:60:29:41:51:ef:bf:77:8d:06:b8:de:93:fb:a7:5d:68:
00:08:1a:5e:00:58:14:6f:1f:c1:aa:7e:41:7b:de:34:06:64:
57:0e:32:32:58:8e:e5:19:0d:be:aa:f7:af:ad:0a:9b:f7:9d:
03:09:0a:c0:cb:57:a1:07:ef:c1:31:f1:80:fa:b4:e1:fc:6e:
c2:ab:46:bd:84:b4:64:bd:60:60:a5:02:d1:3c:bf:12:7a:be:
61:25:02:c7:1c:3a:10:06:f3:68:1a:5d:99:df:a3:8f:e0:38:
35:03:12:62:e1:50:9d:f7:75:a6:8b:47:cd:42:36:66:a3:3a:
bf:52:40:e8:f1:5f:02:2d:22:8b:b6:3d:cb:c5:34:cd:22:11:
3b:cd:06:46:e1:9d:a4:5e:ef:cf:ac:a5:30:18:d9:c8:84:04:
ee:df:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:54 2025 by rpki-client