Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b438c048-2a5a-32a2-be0d-729a0f3ad0c2.roa
File: b438c048-2a5a-32a2-be0d-729a0f3ad0c2.roa (raw, json)
Hash identifier: drkTAm/E4QW8hUJoMrbRghTPjiFCaq1WtFEBVQ3zXC8=
Subject key identifier: DB:9A:A9:E2:B5:A6:B6:7A:AB:21:96:D7:46:BE:86:45:0A:24:F9:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C5AFA2F96650604BC7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b438c048-2a5a-32a2-be0d-729a0f3ad0c2.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 73.242.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:5a:fa:2f:96:65:06:04:bc:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1e3cad7c-f644-457c-9f4e-421ef5947b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:49:c1:c3:f7:1d:58:5b:e1:f1:cc:24:b4:
04:fc:85:6a:ef:6a:f2:15:6b:e0:0e:d2:f7:8f:61:
75:7f:e7:b6:3f:f6:9a:2f:2a:67:57:50:1f:36:08:
f7:ae:c9:f2:7c:f5:34:92:fb:db:3c:b5:36:d2:e8:
6f:1d:68:ce:8f:87:8d:d8:bc:62:1c:5b:b1:0f:d5:
e0:e3:72:37:9a:8f:6d:0d:aa:76:15:0e:d4:24:73:
43:8d:82:4b:96:19:fb:df:79:2c:83:60:58:09:92:
58:11:07:ed:bf:ec:b8:06:72:04:d3:09:b0:05:66:
6f:83:e1:88:36:a9:62:c0:b9:c6:41:d9:44:91:9c:
cb:7f:96:e2:e1:24:c1:6d:e8:09:35:35:58:f0:94:
83:03:97:8c:d2:0b:1a:58:85:00:bb:a1:50:b2:79:
59:c2:10:3b:a6:1e:05:b8:a8:20:86:02:11:44:fe:
df:32:6b:a2:76:4c:db:2b:2b:47:e1:ec:2f:68:69:
52:ea:9c:6b:17:b2:f4:8d:d7:cc:91:27:c5:cd:c7:
b4:00:26:c5:23:7c:dc:01:30:5b:fd:b3:cd:93:39:
20:67:9c:9c:b9:cd:19:ee:52:ca:77:6d:2b:e3:7f:
ac:a4:34:78:6e:3f:2e:6f:fa:54:47:56:8c:cd:c0:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:A9:E2:B5:A6:B6:7A:AB:21:96:D7:46:BE:86:45:0A:24:F9:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b438c048-2a5a-32a2-be0d-729a0f3ad0c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.242.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:06:67:52:93:32:3a:68:d1:87:c7:f5:7b:61:f4:c6:b2:12:
45:6a:1a:12:33:60:67:75:c5:92:94:85:a1:f3:82:bc:06:bb:
54:94:a7:c5:7d:38:45:ac:68:4c:37:6f:03:e5:95:34:9a:c0:
80:19:b2:bc:96:36:ae:51:f4:19:34:79:63:72:01:53:c9:17:
57:d8:ee:64:f1:ec:59:37:bf:aa:3c:5f:5b:48:6c:5d:b3:e9:
a9:ec:77:d2:64:8b:e4:1f:65:b7:10:d3:fd:1d:30:43:ba:de:
8a:32:39:2d:c7:67:3f:8f:b3:b9:b7:08:6c:13:57:9e:f8:98:
86:73:d5:aa:aa:75:2e:20:1e:ef:d3:d3:03:1b:47:bd:d0:dc:
6c:6f:8a:d2:a8:ff:58:73:51:6b:13:54:98:93:cd:3a:9c:8c:
2e:bf:a8:e9:89:9b:c1:6c:b2:38:90:ae:92:d2:8a:ec:33:91:
9a:ec:d4:a7:46:79:4f:32:c3:3b:ac:20:cf:91:c6:92:09:e9:
a2:ad:18:6d:71:aa:b2:fd:45:c9:91:fb:f7:42:e8:49:d0:80:
e7:ae:13:00:79:7c:71:f5:f5:dd:71:01:a6:1d:04:62:f3:eb:
b7:09:0b:a8:88:8b:57:f1:33:82:ec:fc:95:d7:70:2d:e8:df:
a1:13:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:16 2025 by rpki-client