Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f740ce-069e-3209-b1e7-25a08de6fa9f.roa
File: a1f740ce-069e-3209-b1e7-25a08de6fa9f.roa (raw, json)
Hash identifier: 1TtsaU92pzQaKBRFpAm+2NSDq8gLrz9kpmp9eWjAqIo=
Subject key identifier: 20:E4:CB:83:86:BE:A7:CC:A0:6B:98:4D:A2:7D:DA:41:72:8E:8A:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F72EF660D603EF8B81948A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f740ce-069e-3209-b1e7-25a08de6fa9f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.17.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:2e:f6:60:d6:03:ef:8b:81:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=68f94675-caac-45b3-8c6b-9811656b5ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:11:b4:78:b7:46:df:9a:69:77:07:57:03:
e4:ff:29:10:bb:a7:3a:56:92:e8:2a:4f:62:d5:eb:
9d:e2:d5:b5:d5:3e:64:c8:ca:b8:3c:ba:53:5a:7b:
26:7e:9d:a9:d1:56:1c:37:5e:88:c1:82:72:4d:d9:
a6:87:45:b8:7f:d7:fb:4e:e4:ec:f0:22:14:1e:44:
1a:83:9d:1b:bf:7d:5c:49:31:02:84:87:24:99:59:
42:26:d0:f4:e3:1a:9a:c8:e8:18:95:d8:77:42:9c:
e2:c6:7e:47:c5:20:b8:01:4c:52:e0:de:a2:a9:ca:
c4:fa:60:91:58:a0:08:40:f5:30:cd:e7:ec:c2:6a:
d5:60:1d:c3:83:f0:f0:9d:34:9e:17:45:c7:c7:ff:
c2:bf:68:96:f8:6a:17:e0:6d:c8:e8:c0:eb:5a:88:
a4:7a:fd:0a:60:c1:5a:af:39:a5:0c:f4:ac:6d:41:
c6:d4:54:d1:a7:d7:0b:6f:1f:29:ab:75:37:b1:59:
36:0a:1b:6d:28:ce:9c:da:ed:ca:85:ab:07:16:c5:
3d:59:35:8c:af:85:d4:89:49:3f:1b:f8:38:23:cf:
2f:b5:fc:0e:1a:fa:48:9d:cd:12:78:de:63:73:07:
75:34:85:a2:7b:98:12:a2:50:f0:a5:e0:8d:f3:d4:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:CB:83:86:BE:A7:CC:A0:6B:98:4D:A2:7D:DA:41:72:8E:8A:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f740ce-069e-3209-b1e7-25a08de6fa9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:79:07:7b:91:f3:1e:87:50:f9:8c:c3:aa:0f:b7:ae:72:e4:
c0:77:7c:f9:c2:9b:e0:68:aa:41:1f:5f:3a:1c:e8:7b:3a:60:
37:16:70:dd:6a:2f:1b:8a:fc:c8:60:99:b9:a3:64:4a:b1:12:
ca:43:5a:db:d5:c6:12:e2:7b:cf:03:0c:b8:df:d8:de:3a:db:
c6:4f:07:b0:c3:9a:b2:8b:70:94:8d:19:92:00:f4:ca:53:95:
a6:0e:8d:f7:12:86:1b:b7:4b:d2:07:49:73:25:cb:95:b1:ca:
1c:f1:4a:ac:3a:2d:74:e2:f9:17:4c:e5:af:4f:f7:46:28:bb:
b0:be:1f:79:c9:b4:10:53:7d:f4:e5:f6:20:ea:05:c8:ed:ab:
60:84:d5:26:10:f1:d5:fe:f8:ad:e9:65:15:56:9b:a5:cb:c3:
9f:7b:58:c2:c8:56:97:4a:44:27:55:60:01:92:3e:02:33:23:
ab:d9:13:c5:8f:06:81:73:64:c8:df:4f:65:c1:0b:83:d3:3d:
cc:a5:9a:ed:30:7b:fc:2c:d8:55:b3:f6:59:7f:8d:d2:3e:08:
c7:dc:fb:96:ea:de:27:c4:44:9b:c1:ba:12:80:14:2f:3b:1d:
4b:4d:ff:72:04:f5:f8:5d:4c:2f:c1:80:a8:9f:37:a6:39:a6:
57:ee:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:41 2025 by rpki-client