Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa
File: baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa (raw, json)
Hash identifier: BX+QEKkWicK/bh0JrD6NhIxpudcMDOUNebye1m6ldV0=
Subject key identifier: 56:EF:66:07:37:F9:6E:4D:53:7E:80:58:09:4C:BF:C1:08:A7:E9:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E9BDE79AA143EC418D240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.47.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:9b:de:79:aa:14:3e:c4:18:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=36bb7a02-9395-4020-b424-b04bee2e4f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:4e:13:b1:c0:7b:4a:64:e3:95:29:3d:8f:
13:38:aa:b1:cc:a1:a2:d2:17:b3:25:e9:84:3b:31:
4d:c1:2d:9b:cf:e6:67:cd:3b:78:e0:e5:14:f9:84:
6f:ea:bc:f0:e6:21:6f:a6:4c:77:76:a1:fc:19:74:
d1:6d:12:c7:c7:6e:e8:cf:39:a4:b0:1b:ee:1b:0f:
0f:15:bf:dd:2e:28:2d:e7:57:f3:6d:bd:0d:41:1e:
16:d0:67:5f:55:82:86:74:fb:3c:ed:8d:c5:ae:fb:
5c:07:85:01:40:c4:10:a4:35:e4:a8:e9:6f:a7:61:
b1:db:6d:48:60:d9:7a:95:4d:9b:13:c8:34:38:6b:
f2:1c:17:a1:3f:2e:45:76:79:3e:ce:e7:7d:99:bb:
fa:45:6d:c7:c5:7e:77:8e:b3:db:44:34:71:ee:ff:
b5:14:f6:7c:96:f1:83:d7:a9:44:16:ab:74:03:dd:
81:17:08:4e:4d:78:e7:6c:95:80:91:d6:15:26:2b:
5d:b5:b5:f0:ec:3b:21:b3:ff:a9:7f:5e:27:e0:21:
a2:f4:9b:6c:64:ca:ac:85:4f:ed:2c:b1:8d:64:f6:
82:ec:19:72:e4:5b:a4:2c:e1:26:80:f4:73:7e:50:
5a:78:d0:57:da:ce:0f:1c:01:9e:98:c8:54:f7:aa:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:66:07:37:F9:6E:4D:53:7E:80:58:09:4C:BF:C1:08:A7:E9:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.47.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:0b:b3:b0:00:a3:a0:88:b0:ae:a6:34:0c:aa:17:43:46:f5:
6e:64:6a:b4:f0:c6:e9:73:d1:fd:fc:29:67:ac:78:9e:54:7c:
93:7c:9c:b5:82:00:f5:78:a5:47:03:32:75:fc:2d:8b:1a:d9:
ea:76:75:9f:7c:2d:7d:36:9e:ce:6d:2a:2a:ff:57:2a:e8:13:
cd:7f:62:2c:ce:c7:dd:2f:aa:29:0e:2b:c3:32:26:49:a8:68:
4c:0e:8e:36:3a:c6:a1:3c:1c:a9:cc:a6:df:75:1b:b2:3a:73:
4b:64:83:26:13:73:d5:8d:c4:98:0c:2b:50:b1:9a:dd:14:54:
ed:99:bb:95:ed:58:bd:73:a6:1b:0c:65:70:ad:41:0d:38:c6:
bd:13:57:a0:03:64:d0:83:8f:93:99:67:da:fb:d5:25:31:b4:
71:65:95:3a:73:d7:5c:a2:81:fa:e1:fa:44:39:a8:13:61:66:
f4:34:d4:7b:56:e6:0f:22:5e:cb:ad:58:29:2b:9a:93:f6:a7:
f3:e3:c9:3a:f5:41:c0:73:74:01:2c:7e:aa:c3:99:be:2b:60:
ab:e2:eb:de:5b:23:af:bc:b1:21:0a:0d:c1:b6:26:7a:ae:63:
0f:2d:5b:3a:e0:06:15:92:f8:88:1b:47:8b:8f:aa:40:ae:c5:
1c:fd:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:14 2025 by rpki-client