Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa
File: c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa (raw, json)
Hash identifier: aCKLSB3uA8t3hPKSEwobpsWXlMPMIckF0g27V/Fd2DQ=
Subject key identifier: 64:5F:DA:A6:A2:2E:69:90:0D:D7:E6:7F:20:AC:6F:B8:0D:C0:C9:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B14E671D235512ECBE880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.249.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:14:e6:71:d2:35:51:2e:cb:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=114e1114-ec7e-4a58-8142-4411134ff24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:a4:58:aa:13:9f:0f:b7:6c:48:12:f5:03:
fe:28:8f:7e:ff:d2:c4:15:f8:34:c0:f5:37:52:24:
6c:d0:77:3a:0d:82:09:fc:2b:d5:c5:c9:39:20:79:
5a:5c:68:cf:29:fc:7e:3f:3a:24:33:73:5c:31:ee:
62:bf:15:d5:7b:79:41:c2:c8:97:95:7a:98:b3:6d:
60:e8:09:46:f5:46:9e:00:26:3a:76:c9:e3:39:64:
2f:88:22:86:ec:b0:e8:d0:76:22:22:fb:bb:12:ba:
20:78:24:4b:2e:5f:43:96:a2:4c:24:e6:03:73:7d:
c6:54:5b:3f:38:e0:08:7e:ab:e2:8c:e0:7d:4d:97:
42:bd:5d:64:dc:af:81:7c:78:f0:fd:6a:59:fa:9f:
c6:54:94:f9:b6:bd:4e:95:4e:ea:ee:77:fc:9c:1f:
0b:77:c8:70:0b:5a:89:65:96:e1:f6:c1:11:26:ad:
f6:fa:50:ac:7e:9e:3d:89:d0:01:04:f6:a8:6b:44:
d0:1d:10:6c:43:2d:be:e9:2e:29:41:70:43:de:eb:
46:bb:88:44:4a:63:30:85:98:60:a1:fa:00:10:50:
7f:e1:1e:53:42:9c:99:e5:c6:9b:28:1f:a0:24:e0:
63:14:c5:3a:d4:c2:32:e8:de:a0:7b:67:99:f6:f4:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:DA:A6:A2:2E:69:90:0D:D7:E6:7F:20:AC:6F:B8:0D:C0:C9:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4ae555c-2d5d-319e-9d70-c9b8a06db7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a9:f1:ea:c0:db:8d:70:d9:d6:96:91:73:14:4b:f5:66:ca:
61:46:78:58:3f:99:3b:f4:b5:2c:49:7c:f8:10:ee:cf:6a:6c:
dd:6b:45:78:d2:24:99:80:03:6f:7f:5a:e2:52:9f:16:d3:a1:
29:c1:fc:21:aa:d3:54:09:19:e1:af:58:db:57:d3:33:30:c3:
92:25:ef:2b:52:a1:9e:96:71:df:3e:65:cf:5f:1f:f5:4c:7a:
45:9a:ba:6a:d3:54:4d:bc:99:4e:a0:4b:59:c5:60:8b:9e:27:
09:35:a0:23:98:d1:1f:d6:27:13:63:db:a2:74:5c:83:ee:32:
91:38:02:2f:71:6d:b9:4f:5c:bd:81:f1:4a:fe:ab:63:37:11:
71:95:5f:0b:da:fb:ed:52:dc:25:f5:27:9e:1c:44:cd:22:19:
19:01:94:5a:1f:5a:ce:27:6a:ab:e6:34:1c:78:00:20:b5:c9:
76:9f:80:54:41:71:aa:3e:13:b1:d7:ba:30:ce:67:b5:22:40:
92:b0:99:16:21:0b:f5:1c:7e:ab:d5:48:5d:ce:26:c4:66:a7:
f2:98:6f:fd:4e:a3:04:33:98:f5:af:78:f9:6f:d6:f4:47:c7:
ef:57:0e:ac:9d:f1:cd:dc:e7:4a:93:31:e5:b6:81:0c:82:5b:
38:28:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:23 2025 by rpki-client