Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa
File: 3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa (raw, json)
Hash identifier: o2ONitloNwuRk93qf/M3PJRd001Kd8Ab68Tr3zEQckU=
Subject key identifier: 26:37:6D:AF:DB:C4:C6:28:E7:6A:6C:6E:DE:41:10:7F:91:13:D9:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DC932C5E05029605EAC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 73.228.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:c9:32:c5:e0:50:29:60:5e:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=81196974-e2f0-4310-b69d-c9ca6b03bc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:14:f7:c9:37:23:91:93:49:08:21:fb:30:
7c:74:51:2a:85:f1:2e:4c:64:ea:71:52:6e:75:40:
81:1c:0f:9d:7a:9b:2a:44:4b:c1:f9:70:0c:82:73:
f1:b4:37:f3:9a:de:01:02:3b:01:fb:33:46:02:00:
5a:b0:ca:3b:c1:de:86:63:48:83:42:7a:b4:93:85:
1e:92:a4:39:b8:3a:76:cc:18:40:3a:6d:7d:9e:7c:
e1:72:31:5b:3a:56:89:19:9b:28:66:85:be:59:f0:
f7:51:12:f7:60:da:12:23:f8:b6:d5:4a:b9:20:88:
92:00:55:16:dc:ce:07:cb:b3:e1:7d:aa:bd:10:8c:
0a:9b:4a:df:99:65:14:58:53:e3:61:10:2f:4c:9e:
4c:39:16:ea:d1:71:55:5c:0a:d8:05:52:f2:52:89:
3b:86:21:50:42:13:9c:f1:43:77:94:89:db:8c:22:
3e:a8:8e:19:cd:73:76:b6:95:7c:4d:c4:59:eb:f8:
c7:bd:a2:be:1f:55:f6:9e:aa:fe:da:a0:3a:3a:65:
28:be:ee:32:60:20:e3:f4:a9:cc:bb:58:ae:2a:d1:
57:3c:e4:29:d6:1a:c1:3b:44:1d:33:44:cc:ad:fb:
fc:2d:58:84:0a:18:6a:d9:ee:3e:56:12:f6:93:b5:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:6D:AF:DB:C4:C6:28:E7:6A:6C:6E:DE:41:10:7F:91:13:D9:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.228.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:f8:3f:c3:d3:d2:0b:9e:ed:b7:78:d9:8a:e9:68:bd:7f:92:
a1:35:22:71:ad:bf:be:43:11:45:56:0b:81:bb:0d:71:9f:39:
3f:64:cc:42:48:37:eb:76:f4:30:b1:af:58:7b:64:75:7b:66:
2f:f5:e4:09:32:8b:2b:6e:90:ef:ff:1f:0e:48:30:42:7d:d0:
58:5d:23:68:62:fd:88:15:d8:e2:ee:42:f3:9f:e0:3d:40:72:
81:b3:0d:4a:e6:4a:fe:cd:29:89:91:ea:5e:78:6f:c2:0f:3f:
c0:de:bd:be:6c:77:a7:65:61:59:56:fd:aa:94:e3:bb:a4:d8:
2c:87:eb:ca:22:90:e1:aa:bc:bc:62:1a:78:47:ec:7e:6a:11:
77:fe:7a:5c:d0:e9:89:f2:68:ff:02:f9:c1:dc:02:d8:89:03:
0c:c0:83:a1:d2:05:00:5a:f5:1f:0d:b1:9f:ed:7f:02:ab:2c:
c4:cd:94:4c:fb:cf:29:36:3a:6a:8a:c3:45:69:b4:b9:35:85:
70:51:b5:81:e7:7b:17:7e:bd:b1:40:d6:4e:a6:c5:67:95:36:
f1:19:2e:fc:5d:58:e4:74:51:3c:4a:b0:aa:31:fd:4e:2b:a8:
14:5a:12:66:5a:7f:40:0f:1b:0c:0e:63:c0:15:73:a6:61:cb:
d0:22:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:34 2025 by rpki-client