Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ed5f430-f8c8-3a99-a916-d4780554ccb3.roa
File: 0ed5f430-f8c8-3a99-a916-d4780554ccb3.roa (raw, json)
Hash identifier: S/9Xr0aXhM/kqvvXVOBrPhgIFVn4smCkHlSMFIXl5DY=
Subject key identifier: D5:D5:15:9C:F6:E4:14:0D:34:C1:F9:D4:89:53:AC:A8:A3:B2:76:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AF0F2A2193A9FBD38FB90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ed5f430-f8c8-3a99-a916-d4780554ccb3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.143.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:f0:f2:a2:19:3a:9f:bd:38:fb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=93870d68-2ff9-45b0-a615-dbe8cf99a0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:a1:d3:a0:17:a7:c3:1f:09:d2:d3:6d:b6:
f7:89:ef:3e:bd:ea:73:32:b2:8d:75:2c:52:a8:30:
0b:2a:05:83:bf:a8:d0:3d:26:6e:ca:20:74:4a:43:
06:fd:57:e1:f4:a1:51:b0:ac:62:df:bc:70:83:f2:
62:cd:3f:4b:74:25:60:40:e7:ed:ff:2d:a4:8d:9d:
5c:aa:3c:23:80:0c:73:05:ff:3a:2c:95:6e:14:a8:
7d:c2:66:f5:92:43:2e:f0:81:f5:d2:14:9a:7c:ea:
40:11:49:6f:77:64:70:7a:af:60:ee:3f:5c:63:54:
b4:11:fd:33:41:ef:6b:89:37:61:80:e4:25:a2:72:
ae:bf:7c:0d:ed:a3:ff:47:79:a0:fa:d6:d2:01:86:
e6:e4:45:3c:25:ae:e3:24:57:0a:89:3a:b9:a7:27:
c9:ce:96:77:ab:0e:4b:50:b0:57:8b:39:ff:9d:bd:
eb:05:1a:74:40:f6:e5:0a:48:0b:ff:1e:cd:f8:65:
83:a4:c3:e0:0e:02:2b:ac:6e:76:c8:13:7f:27:da:
db:c3:d6:93:bd:d4:51:2e:f4:9b:9c:08:29:eb:3d:
4d:36:fd:49:54:f8:e6:4c:a8:63:f3:c7:3b:3d:67:
b8:be:bd:c3:4f:fb:4f:fd:fe:ed:37:42:db:bc:ab:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:15:9C:F6:E4:14:0D:34:C1:F9:D4:89:53:AC:A8:A3:B2:76:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ed5f430-f8c8-3a99-a916-d4780554ccb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.143.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:90:60:0f:5c:3f:10:3a:78:45:50:15:bb:c8:e3:48:0d:1a:
be:0d:6f:78:68:1a:28:39:2b:af:4f:f0:01:ae:9a:b4:bf:83:
5a:8a:0b:d1:a1:08:14:29:97:87:ba:34:64:07:62:52:ab:9b:
e3:b3:76:50:1f:e3:18:23:30:8c:17:ae:4d:9b:1a:ca:6a:cf:
df:d7:00:3b:ad:df:ed:b8:6c:45:b7:b0:17:9c:09:77:80:8c:
2e:c8:43:d3:b3:8a:49:d0:9f:cf:ed:20:81:60:7f:3a:5a:3a:
aa:17:ed:ed:76:40:ac:6d:35:16:c1:46:81:85:c5:f9:ef:25:
44:94:3a:a4:8c:d1:91:87:22:c7:ed:54:79:be:bd:0f:5c:69:
44:76:8e:e1:25:5b:58:7e:8e:75:e8:c4:4f:ec:c7:26:fb:8e:
e8:f6:4b:25:fc:7c:18:f6:d7:6f:97:5e:7a:ab:71:05:aa:a5:
07:da:ad:36:74:e0:97:c5:6e:01:53:50:c0:3e:fa:86:e4:89:
64:0d:56:97:ce:08:64:2c:ee:08:a4:38:24:da:4d:12:d8:e6:
20:ec:dc:d8:ba:05:25:04:55:1c:5a:90:01:22:4e:89:ad:1e:
98:90:e2:e9:d8:3c:70:24:c7:51:43:42:e0:ae:f6:84:79:63:
28:4a:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:07 2025 by rpki-client