Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73d098da-3a10-3ce5-b6a9-10e06e6ede98.roa
File: 73d098da-3a10-3ce5-b6a9-10e06e6ede98.roa (raw, json)
Hash identifier: xCama2PToYJf6Imp7HhuETzyz0hZg4bwiKGo64Y5RRs=
Subject key identifier: BF:74:67:B8:86:EE:35:F4:C2:91:6A:BF:95:DB:D1:55:65:AD:BE:97
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6EEDEA35B23EA88351580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73d098da-3a10-3ce5-b6a9-10e06e6ede98.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.2.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:ee:de:a3:5b:23:ea:88:35:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=fc1c4c97-40cc-4a1a-99db-990df1c9c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:af:a5:79:ef:98:0d:ef:68:f8:a4:bd:85:
fa:fd:36:0f:5b:28:a3:2d:9b:76:8d:cb:6c:c9:02:
07:16:2e:9c:60:aa:a2:72:1f:a4:31:2c:2b:36:5b:
de:d7:58:55:3b:95:5c:86:41:c6:49:93:59:7a:e0:
5b:0a:65:07:68:02:61:94:16:20:89:56:ca:8c:15:
61:67:e4:ef:ea:79:dd:8c:f9:d8:34:8c:1f:89:b7:
71:a8:9d:c5:9d:5f:f6:bc:59:77:88:db:1a:c7:cf:
07:91:d4:f8:10:9b:b0:93:e7:53:90:f0:12:83:05:
c0:36:b1:ae:96:3d:15:34:0f:e3:a9:af:96:60:e4:
d0:74:0a:4b:d2:a4:85:3a:c4:57:eb:e9:00:80:79:
e1:34:de:93:a8:5c:ae:65:45:27:57:db:53:51:87:
32:a3:34:b1:2d:f1:1c:e2:0f:c1:28:eb:d7:60:c3:
20:ce:db:0b:dc:e1:de:06:2d:ad:23:d5:cf:1e:db:
78:6a:91:88:c3:5f:d7:8f:65:e3:ba:8c:2c:3c:38:
a0:ed:00:20:80:26:21:a8:29:d5:81:d0:a9:f1:01:
31:66:d3:22:5d:05:61:5d:f1:44:b7:6b:41:03:22:
0e:5e:3c:50:df:00:b4:89:00:20:a8:3f:19:32:bc:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:67:B8:86:EE:35:F4:C2:91:6A:BF:95:DB:D1:55:65:AD:BE:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73d098da-3a10-3ce5-b6a9-10e06e6ede98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:46:fe:f7:8a:79:fa:8d:a2:df:90:7f:f3:26:93:3c:ff:88:
8c:f9:f5:51:29:5f:af:8d:ae:b4:c5:c6:75:7f:b4:5e:89:2b:
af:c7:d2:8c:e8:b9:d3:88:11:e7:14:36:d6:78:35:d5:f6:34:
81:70:55:ff:94:a1:9d:b5:be:b9:ed:74:b8:a9:1a:5b:67:4f:
06:65:f9:cf:60:d3:5d:95:80:b9:c6:67:bc:94:02:c1:70:f2:
76:f6:c7:80:c0:8b:32:3d:86:c9:ca:36:a9:02:90:7c:2f:94:
45:98:d8:77:d3:e4:7d:5d:cd:ef:07:65:c6:3b:66:ab:08:bc:
04:1d:86:1c:98:17:6f:79:3c:ec:ca:2f:c1:b0:d8:bd:9d:9e:
0e:ac:9b:65:33:c9:44:22:ba:00:30:8f:6b:d7:c3:2c:e0:7b:
f7:ef:be:68:4c:7d:48:87:52:b4:45:a0:4a:2c:86:dd:e4:61:
7b:c3:56:f7:0b:e4:70:e1:9e:fc:f6:87:1b:08:c8:b4:bf:d2:
c9:2a:1c:7a:9e:44:f3:b7:95:15:f2:a0:2a:e6:50:66:f0:2a:
3b:d0:9a:38:5b:0a:49:86:23:1f:84:d4:22:05:98:3a:6f:1a:
63:be:5c:97:00:32:a2:2e:82:5c:f6:aa:f3:b7:e1:52:25:16:
ea:d9:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:37 2025 by rpki-client