Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da4fe6ef-f4d0-38f2-aa6e-e8350d04a088.roa
File: da4fe6ef-f4d0-38f2-aa6e-e8350d04a088.roa (raw, json)
Hash identifier: Gmp3GXBycQ7g4EEZ5CZNUWa2KyOxmsAItiVSLoErd2c=
Subject key identifier: C0:A0:D7:6E:F3:09:91:03:D8:5B:FB:70:2B:4A:19:7E:9B:C7:DC:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AE8CA75CBCEDE14479B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da4fe6ef-f4d0-38f2-aa6e-e8350d04a088.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.114.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:e8:ca:75:cb:ce:de:14:47:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b254066c-5261-45fb-8191-be6c57cef03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b3:13:73:17:e7:1d:78:bf:ca:88:7c:41:fe:
71:ec:6e:c6:47:6e:7b:f0:04:37:60:39:a9:0f:0c:
3a:2f:4f:07:96:54:42:d7:f8:57:4e:75:a4:7b:65:
08:27:69:4e:38:0a:da:9b:5b:82:da:e9:61:10:20:
ae:a4:7c:73:3c:72:3f:e0:c3:c5:59:f0:b3:ee:45:
c8:4a:50:cd:3e:a6:ca:86:47:54:9c:e8:69:82:e4:
56:dc:f6:97:59:3b:e5:61:9e:96:65:a7:17:9c:16:
b2:58:fc:c4:23:0a:37:0d:e5:ed:a1:f9:c5:71:3c:
38:db:96:c3:29:03:37:ec:7c:c9:97:06:2a:a6:bb:
c7:0d:24:f7:09:26:c5:86:3c:dc:e5:c9:07:d5:51:
df:dc:f7:26:db:65:e1:f3:a5:57:b3:5b:e5:c4:e5:
ff:7a:24:c4:4d:eb:91:c3:41:69:e4:5c:a7:08:5b:
72:57:01:76:28:cf:7f:27:e9:58:dc:c9:99:a3:88:
e5:5b:5b:04:39:35:54:66:f8:69:11:f1:09:d3:1f:
3f:70:f1:c2:ef:0a:1c:4d:7f:94:94:06:3e:db:52:
4c:7c:bc:37:0c:7c:bc:79:d2:64:5f:85:46:8c:ab:
b5:bf:60:9f:ee:72:c2:9b:ec:c3:b4:95:a2:25:84:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:D7:6E:F3:09:91:03:D8:5B:FB:70:2B:4A:19:7E:9B:C7:DC:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da4fe6ef-f4d0-38f2-aa6e-e8350d04a088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.114.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:ba:89:2d:d6:41:e9:88:5d:56:6b:5a:18:25:49:91:d1:23:
54:4e:b8:5a:9f:27:67:82:ac:38:14:62:07:d3:6b:fd:68:37:
b9:7f:0d:1b:5e:6d:01:c4:e1:b2:da:eb:a7:75:84:ae:37:d8:
13:c1:d5:d1:0b:60:c5:86:ca:85:a6:0d:b5:89:e0:10:36:55:
91:5c:f3:6d:76:04:34:16:df:5c:c7:6e:17:0a:10:5d:40:1a:
ba:62:94:96:f5:9f:e9:dc:c5:67:11:70:cd:40:6a:6f:08:42:
a5:6d:f0:13:c8:ac:9b:13:1c:8a:90:01:43:a0:f7:5d:f9:d3:
90:cf:8b:72:7e:94:e7:94:77:7c:4b:1c:bf:96:39:f1:73:c7:
77:8f:fc:56:f0:c6:83:29:61:32:47:6d:1c:00:4a:d4:9e:78:
f4:d0:77:a8:8e:b6:70:34:20:63:aa:3b:0c:27:71:57:b0:f4:
a1:02:79:3d:89:07:da:26:f5:78:09:40:e7:13:e4:8c:62:9d:
64:d7:99:90:14:53:30:8e:73:07:12:d0:ba:49:3a:81:de:fa:
14:b9:20:7e:11:84:aa:b4:c1:d6:0b:eb:95:55:a2:33:62:31:
55:b4:70:e4:2a:e7:4f:26:0f:c4:f7:93:ea:e0:82:b8:10:bc:
5d:cb:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:14 2025 by rpki-client