Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d54221e-8932-382b-b80c-54dfe9db1e30.roa
File: 0d54221e-8932-382b-b80c-54dfe9db1e30.roa (raw, json)
Hash identifier: m9QckX+fGI9oCzIOHNJwzRwZ1/Rzm6/Zv6roqgEuSFA=
Subject key identifier: D5:39:33:04:7E:F6:64:86:8A:62:86:F0:5E:AF:16:B1:F4:24:DC:28
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E27C1FD40542DE5DD3600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d54221e-8932-382b-b80c-54dfe9db1e30.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.17.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:27:c1:fd:40:54:2d:e5:dd:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=90160cef-9a98-46bb-aa9c-339a40419fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:fc:f8:4a:74:ab:88:da:48:3a:56:35:cc:
99:27:fd:68:13:ed:87:23:b2:40:7d:e3:23:d3:3c:
79:fb:3b:16:dc:3a:42:09:82:6f:83:ac:e0:28:7c:
ba:46:40:8d:02:19:53:e0:e7:d6:4d:fd:0a:f6:19:
94:94:7b:37:4d:b0:f6:88:c4:13:a5:ab:99:97:2f:
63:56:55:3a:15:07:ff:69:9b:3f:bc:bb:ea:9b:40:
b8:00:f0:e7:83:c7:01:9b:63:71:34:a5:55:bd:51:
34:fa:a9:a7:bf:8f:0b:00:8a:7a:7c:b8:88:7f:e3:
f4:d7:99:5f:3a:50:b5:6f:bd:fa:7f:88:be:f7:ee:
c8:36:73:88:2a:fb:9c:a8:b9:75:ec:99:70:d5:1a:
3e:ba:92:f0:1d:62:df:48:4f:e6:65:b3:90:12:7c:
fc:b3:13:32:7b:b6:b6:0a:cb:89:9b:26:2f:64:0a:
b7:6c:a3:bb:2c:50:6d:9b:f4:a3:cc:44:cb:33:90:
69:3e:89:aa:ee:d0:47:ee:4e:0f:fb:2f:d8:ab:3f:
4b:12:24:b7:79:d7:9f:50:3d:1d:74:5b:f3:25:87:
e6:8d:bd:ef:48:6a:09:e1:38:15:cb:18:46:01:b7:
9d:52:de:58:e8:73:52:49:bc:33:41:ca:e0:9c:d7:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:33:04:7E:F6:64:86:8A:62:86:F0:5E:AF:16:B1:F4:24:DC:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d54221e-8932-382b-b80c-54dfe9db1e30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:21:67:31:37:e4:de:69:bb:5e:1a:b5:4a:c6:ca:35:c3:a4:
7b:03:78:c3:91:88:68:ab:da:9a:97:0b:fa:70:b6:1f:f4:d7:
05:c4:15:fd:e0:b4:73:ee:36:5a:b9:ac:ef:62:8c:1b:70:c8:
09:b1:cd:59:42:7d:6c:23:e0:e6:38:0b:ff:62:b1:e8:e0:f8:
60:08:57:39:57:ec:d7:8e:09:0e:db:76:3f:44:f0:34:06:8f:
7f:1c:20:54:f8:62:8c:8f:dd:62:0a:3a:ae:87:04:8a:0b:69:
4d:f7:83:4b:40:54:cc:aa:81:17:09:57:cc:99:b2:1f:5b:db:
ee:de:20:4b:00:cf:9a:4b:04:66:8f:cb:c7:81:cc:23:57:54:
2d:2d:64:4c:6d:9d:4f:10:11:10:5b:6e:ee:bd:89:da:5e:34:
b5:a1:3a:cf:89:f0:4d:02:bb:58:0d:ba:2a:d9:77:c6:3b:29:
91:99:10:8b:d5:4e:e3:aa:9b:19:99:0c:c6:bc:3a:98:5b:cb:
b2:3c:84:ee:c4:63:bd:21:02:3b:52:e4:a2:fb:ad:b0:85:b2:
d6:70:87:a4:91:2c:cf:9b:91:f7:be:75:c7:a1:dd:f3:27:fa:
e4:4c:08:4a:50:fa:b5:75:30:16:36:56:98:67:a4:08:6c:90:
9f:da:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:42 2025 by rpki-client