Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7ea94f-5478-3067-8b74-b51132fd23e5.roa
File: bd7ea94f-5478-3067-8b74-b51132fd23e5.roa (raw, json)
Hash identifier: ysaevzcMyAS6Ns+lgIryF9pI29ZKEVmeCYPo+49vmTY=
Subject key identifier: 0B:DF:D8:69:7F:A7:81:3B:ED:81:4F:FF:80:C7:0A:38:ED:2E:7F:B8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E0B7D7A8ADE12E68FC2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7ea94f-5478-3067-8b74-b51132fd23e5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.149.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:0b:7d:7a:8a:de:12:e6:8f:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6b9e2839-7365-41e2-9345-ad51ecc7025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:1d:e4:b5:25:25:e8:bb:8e:d4:be:e9:ac:
4b:de:ab:d9:3f:ab:f6:3c:5b:eb:4b:6e:a2:26:d4:
8c:f6:c4:3e:47:68:b3:45:1d:d9:a0:69:af:35:a8:
5a:23:ae:06:f9:40:00:66:db:e2:24:6c:46:db:7f:
65:16:4d:6e:3b:8b:70:05:32:e9:ac:cc:8f:0a:42:
75:d5:65:d0:77:cd:ec:1a:37:d6:33:da:ab:58:ba:
83:b2:a3:62:e1:8d:9f:d6:69:cc:18:bc:2c:9e:a6:
e2:b1:71:56:dc:10:de:5e:53:53:f3:d9:50:40:ae:
7a:6d:e8:5f:5a:67:b9:30:34:ec:7a:7f:8e:0a:fb:
08:d7:e2:a9:e5:6b:9b:36:2f:b7:ec:a5:f2:05:df:
60:6d:78:12:65:82:09:9c:f7:04:71:50:be:22:c3:
60:60:30:2c:29:8b:bb:87:c7:1c:a6:7f:0f:cf:03:
1b:dd:e4:c9:de:b5:41:24:e4:02:c4:67:7e:07:ec:
ec:dd:f3:24:f1:30:27:9a:0c:69:70:db:18:5e:23:
7a:2f:8a:28:a9:56:ef:e9:c8:cf:af:89:f8:9d:06:
f7:b8:b9:ee:f6:ea:fb:d6:4e:80:00:48:af:17:cf:
19:24:eb:5a:19:20:eb:54:ac:b5:cc:4e:e7:03:a3:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:D8:69:7F:A7:81:3B:ED:81:4F:FF:80:C7:0A:38:ED:2E:7F:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7ea94f-5478-3067-8b74-b51132fd23e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:cb:f9:6e:fa:16:b8:31:b9:36:8e:9c:38:9a:d1:85:25:ca:
e8:47:07:c5:2d:fd:3a:c3:53:3e:e4:b1:dc:ce:c2:8b:f8:e3:
77:db:44:ce:2c:ec:d1:df:c5:9e:56:16:6d:28:d7:e3:b0:bf:
b5:83:0d:6c:ee:8c:2a:3b:65:fc:43:06:e6:f2:3d:ed:56:ae:
9f:a1:9c:ef:3a:9d:91:d8:a5:b4:23:3c:15:6c:0c:dc:77:36:
56:0f:5f:77:5e:d5:a6:27:d5:9e:62:02:0f:fe:8e:4f:a5:aa:
b9:4c:95:19:fb:09:3e:55:b7:65:52:8c:ee:14:c9:0f:6e:4b:
0e:47:97:a4:91:80:d8:50:3d:2b:49:b7:78:6e:c1:88:cb:0e:
b2:f1:7a:14:b6:b1:b7:38:6d:a7:09:6b:a5:76:81:55:3b:98:
c8:23:d8:71:2e:11:b9:68:b2:5e:a1:66:4f:74:6a:2a:6e:c0:
bf:15:f2:e8:37:ed:81:ce:d0:38:ed:70:05:f8:a1:8e:77:4c:
50:fc:99:c1:45:7a:ab:71:55:59:77:36:6c:93:a4:86:f6:2a:
7f:4d:a7:e8:f5:08:04:3a:72:df:0a:fa:52:b5:6f:a0:93:bd:
5f:12:be:a5:2b:95:30:f6:78:72:70:04:88:30:b7:ef:62:4d:
1b:bd:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:39 2025 by rpki-client