Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa
File: 1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa (raw, json)
Hash identifier: m6i0Z6OSNdPD5c9sCeblZH+Pbhemr7Zipodzg1sDhaY=
Subject key identifier: 62:1B:05:AE:13:00:9D:E7:26:5E:13:16:1F:D4:65:F6:D0:6E:5A:99
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AF28EA898E98DF2C5A900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.149.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:f2:8e:a8:98:e9:8d:f2:c5:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=fa690ca3-634c-498a-8836-6af7c2521d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:54:82:84:de:d4:aa:3d:02:73:1b:22:fa:
46:3f:56:03:c1:90:4d:be:62:df:6e:79:7a:94:8b:
b5:f8:23:a7:64:57:d2:2d:40:6a:d1:8d:15:39:4b:
fa:59:1b:d6:cc:f0:eb:0b:92:fc:33:3c:94:4c:c0:
42:58:10:74:9f:17:a8:4a:a9:5c:fe:39:3d:bb:8b:
5b:c1:64:2f:38:b7:b7:cf:39:c8:4e:9f:44:07:ef:
c9:51:22:9a:d3:d3:61:32:da:41:2f:d6:49:63:1f:
25:f9:f1:da:03:34:75:02:83:85:7c:0b:7f:8f:32:
46:5b:0c:df:0b:a5:7c:dd:71:7a:89:58:d5:6f:d9:
f4:7b:63:e7:20:1a:9f:ec:e4:b2:a0:a1:11:8d:42:
96:4d:0a:47:4a:0a:18:7d:14:ee:54:2e:f0:9c:8e:
ec:99:cd:c4:7c:e8:f3:31:e7:c8:8a:53:42:1c:34:
8d:d0:49:30:2a:23:4b:79:01:37:af:fe:98:d5:47:
e0:1d:3a:26:7d:b8:f1:51:ed:f5:8b:64:e0:45:3b:
bb:a7:c6:b0:32:e4:64:c0:7b:57:4e:be:bd:6d:b4:
d7:a9:91:e8:48:1a:c2:e5:16:35:e2:67:4c:a3:a1:
3e:4b:20:90:ea:cc:c7:fe:88:e8:54:93:cc:21:d5:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:05:AE:13:00:9D:E7:26:5E:13:16:1F:D4:65:F6:D0:6E:5A:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:df:d0:eb:90:f9:fa:27:9a:8a:66:dc:d7:47:90:26:8e:d5:
c1:b6:96:77:86:4b:50:e9:19:e7:68:3d:08:01:b9:22:78:90:
75:b8:d6:22:0c:ea:00:74:76:00:aa:f4:26:e6:f1:57:72:97:
90:d3:90:c2:00:86:a0:6f:16:f2:46:ff:4f:ac:b3:8c:5e:b7:
44:cd:01:2f:5f:e7:41:4e:7b:72:6f:6a:94:27:61:39:67:ad:
aa:a7:60:87:26:ce:3d:72:d3:46:38:81:59:07:a9:a5:60:07:
d3:eb:7e:78:cc:9c:fe:e7:6e:dd:07:5f:d9:04:96:13:25:fc:
8c:c2:59:74:38:b3:3d:15:01:ff:f1:e7:b5:59:4e:07:4e:54:
70:4b:fb:55:c6:89:25:76:3e:ee:e5:42:32:f4:80:18:fc:5c:
dc:c5:d4:5a:c6:ab:81:65:67:28:5e:63:20:f6:61:20:5a:24:
39:dd:b7:b8:ec:f8:4b:60:0c:68:69:11:f8:07:3d:53:57:7e:
16:ab:e5:b8:57:dd:d5:40:f3:63:2d:dc:02:51:12:9d:f4:3e:
8f:cf:16:84:f3:05:9f:f9:d6:5b:56:03:86:72:72:12:a3:32:
c2:d5:b1:1d:e7:de:6b:5b:4e:6d:40:8f:de:f5:f6:37:e9:be:
31:14:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:15 2025 by rpki-client