Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/0a202c69-684e-33b7-aa3c-b2fb1b119152.roa
File: 0a202c69-684e-33b7-aa3c-b2fb1b119152.roa (raw, json)
Hash identifier: gOaoNYPMAV7hL+ntvVcwqFvV8VhxMKPR8yU0C6xZLnQ=
Subject key identifier: 67:CD:38:7C:86:38:61:E5:AA:0A:03:0F:78:DA:75:D0:A5:A6:28:0B
Certificate issuer: /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial: 010D0C9F43285848D03BF96AED88EFF05E86A000
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/0a202c69-684e-33b7-aa3c-b2fb1b119152.roa
Signing time: Sat 08 Feb 2025 10:15:52 +0000
ROA not before: Sat 08 Feb 2025 10:15:52 +0000
ROA not after: Fri 09 May 2025 09:15:52 +0000
asID: 36734
IP address blocks: 173.195.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:3b:f9:6a:ed:88:ef:f0:5e:86:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Validity
Not Before: Feb 8 10:15:52 2025 GMT
Not After : May 9 09:15:52 2025 GMT
Subject: CN=faf193ed-e023-4bc8-9f80-5035d5630daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:9c:24:be:91:94:ff:e4:98:20:a7:98:c1:
c9:c8:b8:c3:07:f2:f1:4d:11:e9:dc:cc:ce:c0:3c:
05:60:26:85:e4:c5:32:fa:2f:f6:b9:ac:3a:f6:af:
83:f3:30:92:48:ed:1b:34:5f:a0:6a:81:8e:25:7f:
ea:80:06:8e:88:56:5a:d7:0f:c8:1c:a9:82:00:1a:
b8:a8:42:cd:c7:ba:f6:40:08:97:15:c2:33:1e:2e:
ee:94:b3:38:73:1c:d1:d6:0d:70:b5:c9:73:b1:23:
88:98:7c:1f:5a:ee:23:87:e3:22:73:ce:e7:25:5d:
4f:83:a1:e5:45:87:ab:d0:df:ba:63:1e:b8:87:62:
ac:b5:4e:90:db:ca:e7:03:f5:a1:8b:43:93:5f:84:
d4:ca:c6:ba:38:8f:46:b4:d4:42:2f:39:b9:e6:35:
ae:e9:16:cb:f7:fb:09:c0:33:5c:b0:fd:2b:b3:17:
90:5f:4e:b7:91:32:ba:83:4b:7f:57:e7:ff:c6:4e:
72:c4:7d:df:ec:63:17:91:cd:a6:d1:5e:03:98:ff:
bb:02:2f:38:50:5d:8f:bd:90:a7:88:53:31:b0:d4:
55:01:e4:d5:b6:5f:fe:de:59:b4:cd:4a:5d:63:32:
09:4f:f2:7e:28:62:26:61:6f:d7:41:3e:d4:d7:a0:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:38:7C:86:38:61:E5:AA:0A:03:0F:78:DA:75:D0:A5:A6:28:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/0a202c69-684e-33b7-aa3c-b2fb1b119152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
X509v3 Authority Key Identifier:
keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:ce:17:e1:5e:86:cb:e5:d7:4b:8c:ee:05:85:69:2f:38:cd:
1d:9c:56:35:b8:e4:f4:9f:de:57:dc:ee:09:65:ed:8d:7f:20:
ad:4b:3a:b4:a0:56:9a:e9:60:38:0a:14:82:ee:46:4f:2d:e9:
37:98:04:6b:85:f2:0f:7e:6c:9e:89:6f:a7:9a:61:4f:01:f6:
13:62:19:f7:b5:19:5e:3f:e5:7c:b9:0d:a7:d2:18:60:e6:ab:
dd:fa:9c:b5:44:b7:18:2a:b0:9d:3c:ea:a4:c8:93:38:58:ee:
63:1b:5c:4a:1f:2b:8b:bc:4f:07:af:f5:df:68:ed:17:09:93:
a7:40:20:e3:07:fb:cb:5c:5c:a7:2a:06:4e:04:bb:05:71:bd:
a9:c9:6f:3f:ab:26:d3:36:aa:17:66:0a:7f:63:3c:56:85:ca:
5c:29:7e:4d:c5:ee:0c:03:86:28:36:01:ca:b2:03:12:91:69:
7e:f7:32:38:66:ef:54:3c:96:7c:ad:5a:1e:b6:14:11:66:52:
c5:8d:0b:41:90:e6:a0:bf:6b:c2:ba:a2:9e:05:b9:bd:32:9b:
9b:b3:78:ec:ee:41:a9:ab:ed:c5:50:00:ee:11:7a:a8:81:5d:
a1:74:2a:fe:81:12:d4:3e:a0:ac:3d:ff:e5:40:c0:40:64:2c:
e0:5c:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:01 2025 by rpki-client