Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/543eb878-0086-34b1-8a15-adda30c5c5b6.roa
File: 543eb878-0086-34b1-8a15-adda30c5c5b6.roa (raw, json)
Hash identifier: ZPP3+FVCyFREYOud4Fgju6bwJpz4K4sbp9E4zW6inaI=
Subject key identifier: B0:99:F9:2A:1A:0D:2E:DA:99:76:47:D7:9C:E2:99:FE:0A:C8:DD:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E44689E3FCEB3A6874D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/543eb878-0086-34b1-8a15-adda30c5c5b6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.219.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:44:68:9e:3f:ce:b3:a6:87:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d6b2610b-933e-44ea-b28f-a650ee671a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:cc:6b:68:7b:9f:82:3c:66:43:99:7c:d9:
0d:99:84:f8:a1:c0:9b:ac:7b:2a:53:a5:2b:50:c8:
fe:4b:87:bf:6f:bc:b1:0a:48:46:b4:9e:a5:ad:51:
74:7a:aa:70:5c:62:ea:80:1c:7d:b6:a5:9a:68:9c:
ec:a5:c5:ff:94:9c:8b:97:ef:75:e5:97:b7:a6:08:
60:50:ad:d7:4e:e7:d6:2e:7b:78:41:d3:39:42:71:
c9:76:af:ab:ff:7b:b5:b0:ef:c5:fd:f9:c8:00:5c:
38:05:c4:ac:67:6b:eb:5c:cb:e5:bd:3c:c4:04:e0:
9a:56:5b:d0:c0:b3:e4:f8:68:43:df:91:63:e0:84:
dd:b5:e9:ab:8e:34:84:5c:a1:2f:9d:26:11:a3:cd:
7b:76:11:25:01:c5:3c:59:a4:76:33:b8:22:ab:1c:
c5:1c:ca:f3:bb:ff:41:58:04:c2:90:b1:df:e1:11:
a0:26:29:35:12:28:1e:de:14:d8:87:8c:96:c9:11:
74:ea:ce:f9:28:d4:0d:38:3e:58:1d:dc:5e:99:d9:
5b:66:be:12:83:4b:44:fd:ec:23:37:8c:06:4d:d1:
54:40:08:4f:b2:b5:4b:f5:e5:b5:68:50:3a:06:65:
c2:4f:53:37:1d:44:5f:fc:77:8b:e5:a9:8f:8e:9e:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:99:F9:2A:1A:0D:2E:DA:99:76:47:D7:9C:E2:99:FE:0A:C8:DD:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/543eb878-0086-34b1-8a15-adda30c5c5b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.219.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:a9:bd:50:71:dc:a5:89:f0:c4:c0:23:a3:5a:17:c6:d7:fe:
9a:65:60:18:27:b1:dd:d4:53:95:5f:ff:08:1e:6a:30:cf:46:
30:2b:cb:d3:68:f3:59:a3:07:cf:5d:ec:22:16:66:6d:2e:68:
df:43:c7:0b:20:d9:a5:56:1c:c8:d3:7a:83:fd:ed:a5:cb:ad:
e3:f9:f0:59:72:cc:1d:75:a0:5a:45:ad:36:f0:71:6b:d8:72:
0d:db:93:67:75:e4:e5:82:89:b2:c8:02:ff:6a:96:b5:63:fe:
75:cf:37:9c:a3:2e:dd:21:62:21:19:af:ee:39:a6:ed:3f:5f:
b1:62:d7:4e:7f:1d:53:3e:6a:6b:c6:64:be:8b:d0:d0:d6:e2:
5a:de:b2:cb:a5:8c:77:76:e5:12:91:9e:f5:8b:71:16:51:af:
f8:26:a9:d2:a1:42:8e:f8:d0:51:a4:96:a6:83:1f:f8:ea:e1:
fd:99:ec:87:a1:6c:61:58:13:96:93:79:81:72:23:da:f1:55:
aa:bb:9f:02:2b:7d:00:e1:14:ab:cf:79:ee:bd:1b:a0:01:96:
5c:b2:d8:76:84:7c:d2:f9:c3:a1:fe:d9:60:ba:63:58:7d:19:
01:c2:da:54:ff:18:f0:b6:af:24:d4:be:d9:6e:c5:21:91:2f:
94:6c:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:51 2025 by rpki-client