Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa
File: ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa (raw, json)
Hash identifier: Q3OH/9W7w8SScQ/gAinDqQoeSr7HA/6u7iabEnFfMgw=
Subject key identifier: F4:F7:90:4D:93:E4:23:52:17:1C:67:F8:D3:20:20:A3:ED:C2:C4:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F741F2E6C4ADA0CF3E4280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.238.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:41:f2:e6:c4:ad:a0:cf:3e:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=efeb44c1-6498-413f-a9d8-b88fa127fb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:b8:d2:2c:5e:01:e8:aa:42:5c:74:d8:7d:
6f:59:81:a5:1c:88:4e:fd:0e:2b:31:b8:68:f0:2c:
75:2a:eb:a1:50:b9:53:87:0b:b3:ea:ba:f4:4f:ea:
28:bf:f8:d3:46:e8:cf:a8:fb:33:6a:dd:33:95:a0:
9c:58:ab:2b:51:50:9c:5b:13:d1:d2:e9:75:90:1d:
d3:2c:e5:86:e9:f9:cb:ae:44:e3:14:a3:30:08:d8:
8d:fe:db:88:4f:55:71:27:7d:97:a4:a0:46:77:90:
56:54:46:52:bc:58:d2:de:56:ca:3c:24:0e:72:26:
53:96:a9:72:bd:22:fe:11:2d:e7:6a:08:93:37:6e:
ce:8a:f8:ed:f6:05:6b:74:7c:e3:74:2a:f0:ad:d8:
4d:5f:26:9d:2d:c6:db:b1:ee:0c:a9:40:36:a1:c9:
45:3f:cd:c6:98:c7:36:ec:60:9b:04:1a:4a:62:98:
50:b9:a2:85:a1:f9:67:ab:a0:44:82:20:83:64:3e:
0e:09:70:d2:45:cf:66:32:2f:9f:c9:cb:4e:80:ac:
5c:f5:d1:de:a7:fb:b5:a3:e7:9d:b3:38:8d:7e:00:
1d:68:06:bb:5e:f8:7c:ed:38:cd:ca:76:31:31:1a:
4a:55:f1:a8:03:ae:23:37:2a:b4:b5:1b:49:be:1d:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:90:4D:93:E4:23:52:17:1C:67:F8:D3:20:20:A3:ED:C2:C4:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.238.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:c6:52:58:27:4e:ba:60:86:c6:bd:f9:3e:9c:2a:29:9e:35:
15:96:43:17:6e:38:92:86:62:04:63:4e:15:c7:6d:71:c8:39:
e5:00:ea:95:60:45:0b:a8:d7:9e:86:2d:4b:ac:84:7b:23:2b:
e2:c0:3a:b1:21:c4:11:7e:02:19:38:0f:dc:7e:2f:b7:ac:0b:
36:70:ab:d8:4d:5b:f4:4c:b5:4e:bd:df:0c:ed:7a:81:b3:7b:
27:f1:5f:7f:37:10:e0:da:7a:6c:5f:33:bf:83:e4:c6:c2:03:
f8:a2:cc:82:bd:78:0c:f4:0e:5a:ef:4d:f1:8c:3c:14:97:f5:
d5:52:1d:28:a0:ac:4b:33:39:b0:dc:d6:26:8f:4e:cd:54:71:
82:d2:0d:52:d6:55:95:9d:6f:ec:f6:b9:80:22:38:c3:08:f2:
01:98:63:50:9a:1d:bf:55:06:fb:79:a8:2b:2e:ac:fd:85:8d:
4a:30:9e:a4:32:d5:8c:4b:80:e7:42:c7:7f:bb:a8:49:46:28:
6b:f1:77:5e:24:80:eb:95:f1:65:97:56:1c:a9:61:5f:c1:2e:
49:a3:38:ea:64:f5:b2:58:26:07:37:1c:02:e7:65:40:fe:79:
41:7c:6d:fe:44:a0:36:59:96:5c:e6:e5:e9:a5:d7:d8:52:bc:
f4:63:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:57 2025 by rpki-client