Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e3bae0-7e0d-34b0-8daf-0ab3d6debb4a.roa
File: a0e3bae0-7e0d-34b0-8daf-0ab3d6debb4a.roa (raw, json)
Hash identifier: WIdZKHEImyJAtevABS+b3aM2cUP1w59he+eDPZMvM1A=
Subject key identifier: B1:2A:43:13:10:DC:24:03:11:D1:00:AA:EF:EE:4B:5F:44:ED:57:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C05214741950D28EC2000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e3bae0-7e0d-34b0-8daf-0ab3d6debb4a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 73.2.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:05:21:47:41:95:0d:28:ec:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=151af56c-2df9-44b4-bab2-ce4ff44cff53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:91:2f:15:fd:d1:b4:9d:bd:7f:f0:6c:fe:
d9:42:f8:80:22:5f:a0:76:3f:0b:09:5f:84:25:d4:
34:43:ca:9d:dc:b1:50:74:63:5b:28:1c:7a:16:95:
54:07:18:9e:89:9e:a7:23:ff:98:54:fb:d8:73:d7:
a5:d6:28:7d:05:09:7f:3b:51:a2:fd:48:46:aa:b6:
9c:28:29:df:a1:a3:bf:6d:a8:54:a6:70:fe:a1:17:
5b:88:5d:1a:6b:d6:8f:29:52:8a:07:22:dd:31:01:
66:c4:20:95:d6:59:e2:41:b7:e9:94:9a:cc:35:a9:
ab:df:17:27:1a:4f:2a:d8:5e:f5:cd:c0:6a:72:17:
ce:74:03:b6:fb:a8:17:11:b9:db:2a:27:e1:06:e5:
67:e1:55:8d:22:84:59:d1:f8:ce:01:bd:2f:83:2e:
44:e9:65:ba:bb:07:5a:29:f9:4b:12:46:4a:a8:3b:
6e:70:4e:6c:a5:3f:a0:b2:51:60:22:95:b4:05:0b:
14:5b:09:66:38:3a:1b:0d:3b:89:33:7d:a8:a1:7f:
50:ae:6e:70:2a:37:9d:d7:6e:b0:36:a3:3e:b7:0d:
82:52:b7:8f:e6:5e:0f:5d:a1:4c:09:07:26:46:26:
c5:04:c0:0d:61:53:b2:40:a0:27:1c:f9:05:ce:47:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:43:13:10:DC:24:03:11:D1:00:AA:EF:EE:4B:5F:44:ED:57:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e3bae0-7e0d-34b0-8daf-0ab3d6debb4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.2.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f5:96:06:57:ed:08:4e:f9:68:23:fd:5a:03:8b:f3:3a:48:
cb:53:d0:92:3f:e1:98:6d:83:45:19:0a:c3:04:b8:78:8a:b3:
52:d0:1e:01:60:de:c5:4d:0c:76:b5:f6:e1:d4:83:87:77:36:
fa:03:a5:3d:22:af:a7:24:43:1c:4d:e6:e0:c4:ca:35:b1:d5:
a9:da:85:3a:22:8d:f1:31:cb:89:e1:f6:dd:35:a9:ca:68:ac:
fe:ba:5c:cb:1c:7b:1a:d6:11:d2:84:a9:f4:de:cf:d6:b0:bf:
7f:ca:92:bb:b5:0e:70:a5:49:bc:b9:5c:e0:dc:8d:be:ce:f4:
f6:fc:ad:83:7f:70:50:94:4f:85:f6:78:1d:55:ec:94:f5:4e:
4f:0b:66:10:64:ba:7a:da:cc:a6:b3:c5:66:33:de:56:d3:11:
64:a1:fa:a4:df:c3:26:51:b9:1c:06:f3:a2:11:de:f9:d9:ad:
9d:96:39:0e:91:ec:1d:31:cc:e4:d1:bf:2d:7c:b8:00:3f:75:
fb:17:eb:9c:24:28:ea:e7:1b:33:a4:0a:c7:42:7a:48:41:17:
90:8a:18:d0:29:39:30:9f:0e:c3:8d:c1:21:49:8c:ce:0c:37:
de:e1:b3:64:47:c7:ec:f5:05:6b:32:2d:6f:c8:bb:24:e9:ae:
9d:68:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:44 2025 by rpki-client