Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa
File: a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa (raw, json)
Hash identifier: 3FlkxZ2U6OQW2s3XURlrANFb6FJJhqfRWUwmhVk7dgU=
Subject key identifier: C5:63:FC:03:8C:BF:5F:DE:99:C2:5B:65:D1:A9:A9:10:D4:7B:71:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B1A0D65A41D727DE0AE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.38.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:1a:0d:65:a4:1d:72:7d:e0:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=dc6ea20f-bcff-46f4-a45e-bb2fa02064b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:be:2c:08:df:50:5c:90:3a:30:fa:4f:31:
1f:89:6d:55:35:c8:77:21:62:b9:52:8b:b4:e0:3f:
2b:ec:6a:80:b9:1a:82:a7:4b:57:c9:d4:1e:c5:3a:
bf:3d:ea:30:ff:ce:0f:1e:5d:47:f4:b1:0b:e2:18:
b2:a4:84:34:cf:53:c9:f1:98:1d:11:9c:f6:c6:20:
81:fb:20:bc:f6:6c:72:60:fe:5e:ea:79:d6:3d:b3:
0c:8c:7a:b4:57:b8:65:f7:18:be:60:ea:9b:88:20:
34:b0:7d:35:86:4c:7a:3c:7d:b6:df:d8:9a:f3:f7:
4b:4d:a7:c4:86:cd:ee:09:0b:bc:db:06:9d:5c:c8:
dd:33:8d:a9:3c:a2:19:c4:bd:18:12:83:40:7b:18:
be:9f:c3:bd:d7:f1:fa:b4:03:ec:28:cc:22:1a:ad:
db:96:c7:08:d7:95:4a:d4:95:10:22:46:13:53:b0:
8b:16:04:f9:ca:24:7a:08:9c:ca:25:95:f2:cb:0c:
3a:dd:17:05:ee:47:19:0a:14:bf:59:5b:85:12:e1:
48:c6:c1:fe:a0:97:a6:de:5b:03:bc:a9:37:1c:9a:
6a:76:47:b1:8e:44:3d:6f:13:03:b3:d0:08:92:46:
8c:b0:87:3b:97:2e:83:1c:2c:f1:46:10:e3:76:ad:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:FC:03:8C:BF:5F:DE:99:C2:5B:65:D1:A9:A9:10:D4:7B:71:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7c:3b:27:84:83:2c:90:10:97:0b:11:7d:b3:66:af:9b:12:
06:61:b3:d9:67:58:58:b8:99:3c:41:86:7b:f8:0a:b1:6d:d7:
ed:6a:ba:51:0e:60:9d:dc:de:2c:df:a9:ab:25:a9:a5:2a:d1:
bf:80:be:4e:09:1a:6e:cd:e0:72:39:9b:af:93:4a:be:f3:77:
ae:c6:b8:bc:e3:17:05:be:98:5a:78:96:24:35:ec:f8:79:29:
65:42:d6:60:40:4c:2e:4a:60:79:48:f4:ac:ba:eb:f8:41:c3:
7e:57:9a:94:07:ed:cf:08:20:15:14:00:b2:10:ad:36:80:70:
12:b2:02:9a:f8:e7:ac:11:e5:9a:67:b3:a1:51:3c:cd:73:bd:
be:5a:26:48:ae:e1:77:89:3f:f8:d9:34:77:06:eb:eb:92:7f:
88:8b:dc:d7:5a:2f:f0:e6:22:c3:19:1c:e1:d4:83:82:d9:e1:
df:fb:69:8c:0d:fd:3d:b8:5c:a0:db:c8:ce:8b:c2:38:c3:c8:
b5:94:82:b2:73:2f:18:6c:65:50:b7:c4:70:7e:64:b0:a7:c1:
cc:3e:e7:17:70:f8:b0:68:cb:20:8f:89:96:dc:ff:dc:ac:3d:
8c:fb:35:ca:82:ab:17:a9:76:98:e5:b5:d1:8a:04:9c:0e:e1:
57:e8:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:08 2025 by rpki-client