Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac2eb54-2add-347b-9810-1829a1f2107f.roa
File: aac2eb54-2add-347b-9810-1829a1f2107f.roa (raw, json)
Hash identifier: MXZiebJe/uM9xRmfdGepCjp/D3lOMc8XDt+82QWW96c=
Subject key identifier: 4F:2A:A5:D2:26:7C:D0:D9:4E:77:98:01:48:39:7A:00:AE:D5:4A:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEEEC6BDF4EEF1E77E6C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac2eb54-2add-347b-9810-1829a1f2107f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.248.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:ee:c6:bd:f4:ee:f1:e7:7e:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=eb11c49a-2714-496d-acbc-e4734558cc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:3b:3c:62:b8:40:90:59:fa:6f:6e:4f:85:
95:2f:c1:85:d4:77:e8:5b:ee:35:18:2d:e9:50:6f:
ac:62:a4:c0:0c:03:b0:c2:54:9d:2f:b1:84:bc:d4:
8f:2b:e5:c6:e3:06:fe:44:fc:a5:cb:6a:48:e3:8a:
3a:5f:dd:59:24:07:58:62:74:4b:86:27:14:04:00:
09:27:39:0c:3f:e4:51:2a:ff:f4:6a:45:2b:f5:73:
43:8a:d5:96:80:ef:97:c6:9d:0f:4b:1d:1c:b9:0d:
62:c2:6a:49:c9:f6:bc:83:91:cf:26:36:14:2a:f1:
9d:2e:91:12:cf:c6:91:04:1f:3d:d5:7c:aa:96:db:
ff:a6:32:1c:87:6d:58:a0:ee:42:ea:0d:41:b1:62:
02:d9:fd:19:8a:3c:ad:3e:bb:2a:1a:b1:e3:0e:33:
95:41:46:cb:d3:84:c5:b6:b3:0b:3a:f8:c3:f8:52:
31:61:88:44:35:f8:ed:d5:c6:47:f0:96:51:8f:1b:
a4:6a:9e:df:6c:16:1d:da:19:9b:f3:18:a2:8d:61:
24:3e:f0:bb:0a:42:32:51:44:d7:ef:59:e2:96:58:
b4:69:2b:08:c4:1c:4a:95:e3:54:c9:1e:ba:cf:f2:
45:8e:e8:dd:10:2a:77:d4:ca:b6:59:d0:0b:bd:f9:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:A5:D2:26:7C:D0:D9:4E:77:98:01:48:39:7A:00:AE:D5:4A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac2eb54-2add-347b-9810-1829a1f2107f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.248.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:e8:f9:bf:90:5d:11:5b:45:66:7f:e2:6f:ed:fb:8d:d4:df:
a4:d3:42:3a:1b:77:ad:01:7b:2b:d2:f4:f7:b1:1e:73:8e:d5:
34:58:cf:f1:48:03:cb:59:24:cf:6e:ee:6a:93:a0:29:eb:24:
7c:5a:d2:d3:05:59:45:5d:64:59:a3:1d:b9:24:b3:14:d8:59:
14:93:0c:63:07:3b:e1:32:6d:16:af:d8:ba:5d:1a:f3:0b:81:
cc:f5:48:66:5d:7f:49:99:62:b6:c5:f6:b0:80:53:06:48:20:
dc:69:62:52:41:b9:f6:a1:06:d0:9f:2b:38:95:85:82:10:75:
22:df:ed:d9:e9:4b:c2:da:f1:4e:3d:15:bd:09:7e:09:f6:87:
2b:85:5a:49:0e:9e:aa:af:aa:c8:1e:dd:23:66:ed:18:bd:38:
b3:53:84:da:44:43:bd:44:58:96:c5:ca:d1:56:54:6f:3e:ec:
89:e1:e2:65:dd:b7:6d:1a:4d:10:84:88:f2:14:2f:53:da:73:
4c:f3:b2:77:8c:fb:14:4b:0e:4e:79:2d:0f:58:6a:b8:e7:c8:
56:1a:9f:61:9a:f7:c9:7a:c7:5f:c2:3d:84:eb:0e:66:c2:26:
ee:c1:17:72:b2:5c:96:6b:42:49:5e:0e:f8:e5:9d:9a:19:76:
cb:a4:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:43 2025 by rpki-client