Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b38f9905-889a-30c5-a0c7-143160ff7eb4.roa
File: b38f9905-889a-30c5-a0c7-143160ff7eb4.roa (raw, json)
Hash identifier: kMwyA2Qg89yFEoCZgmmppAK0MLjyGyctfRfE1oeot0M=
Subject key identifier: 35:F7:71:C6:26:9A:93:C8:30:24:B5:FD:C7:86:7A:8F:71:0A:4D:0E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E6CDDFD2E369CDF821880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b38f9905-889a-30c5-a0c7-143160ff7eb4.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.249.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:6c:dd:fd:2e:36:9c:df:82:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c2f014c1-56cd-4ec8-bf98-af5a9105b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:6e:43:b9:86:f5:8e:6d:36:72:24:d5:c2:
6b:7a:d5:a3:eb:1c:30:4e:48:4d:4c:8f:d8:19:2d:
43:c5:bd:80:3a:a6:63:a6:e8:b2:15:4b:0d:84:b9:
c8:e3:91:e1:83:97:ff:8d:2d:dd:00:74:c5:50:08:
d7:28:02:ef:29:dd:11:a6:db:0d:b7:c1:2a:07:31:
fd:66:59:fd:aa:4e:4c:e7:ac:c6:30:6d:75:57:c2:
5c:db:a5:71:77:05:58:63:d5:25:bd:eb:1e:21:c8:
52:7d:ab:f8:55:cc:df:f8:4a:0c:a1:a5:c2:47:a8:
2d:c1:7e:66:a5:aa:81:59:90:de:3b:c3:86:da:a9:
06:54:fe:35:0c:ed:c7:14:62:c9:e5:47:77:db:e9:
70:e3:e0:72:72:16:b7:97:05:39:e5:45:ce:ba:2f:
48:1f:ba:f7:fc:9e:42:64:ed:ac:92:a1:2d:7e:ca:
bd:41:e6:7e:2f:6a:7f:07:f3:3e:d5:89:01:a9:41:
ad:16:87:66:0b:e4:67:c2:e1:fb:0a:f8:0e:49:aa:
af:46:5f:5b:ee:cc:89:c9:4e:3b:d3:55:78:40:27:
d8:ab:96:31:f3:ff:fc:bc:63:cc:16:1e:6f:1d:7c:
41:08:b6:82:89:30:88:45:7b:7c:23:c0:13:5c:4b:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:71:C6:26:9A:93:C8:30:24:B5:FD:C7:86:7A:8F:71:0A:4D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b38f9905-889a-30c5-a0c7-143160ff7eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:2f:3e:80:25:bb:1e:0c:d0:90:ff:c4:ba:cd:d5:7f:6e:6d:
50:c0:ef:7a:2d:b6:d0:37:91:0c:5a:a5:1f:e3:ba:a0:1c:c8:
cb:aa:e7:3d:8b:7b:34:3d:d4:95:09:62:7a:99:11:7c:d3:48:
fd:e0:1c:b1:8b:20:4f:a7:e7:fb:76:dc:42:4d:ee:fc:2c:c4:
e5:69:1b:bd:97:7f:48:36:7a:c9:3b:9b:30:42:46:45:08:03:
2b:9f:18:89:1b:3e:f1:d5:9b:2f:bb:a2:62:5f:d4:9e:13:78:
a6:44:e9:21:83:36:5f:b9:bd:1f:11:e2:eb:41:1e:c5:5e:81:
89:a2:3a:f9:c8:40:fa:b8:f6:46:96:e6:ee:69:35:8d:8b:b7:
f3:a6:dc:f2:54:97:25:ef:f9:66:3e:6d:5f:cc:ce:ff:74:11:
90:93:6a:49:a6:b7:84:8c:6c:1e:55:c0:07:0a:3b:9e:9e:fc:
81:e6:6f:fe:6f:30:85:fa:fa:5d:11:cb:bd:b0:b9:22:69:7c:
ca:8c:f7:e5:53:e6:97:e0:9e:1a:3e:87:ee:2e:0d:13:71:3a:
8d:b5:49:13:38:68:9e:c7:0a:bc:f7:30:d6:d3:76:9a:20:07:
cd:e3:01:26:e2:e0:03:a5:3b:2a:5f:3d:7a:22:6c:78:20:eb:
39:19:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:43 2025 by rpki-client