Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e12d1eb2-880e-34a0-9f93-77e185eb26e7.roa
File: e12d1eb2-880e-34a0-9f93-77e185eb26e7.roa (raw, json)
Hash identifier: CRIxbMP+vcQaEFT4KdTvIRLVs1+pvY0F0LRwBmOvRxc=
Subject key identifier: C4:83:AB:76:5E:A0:BC:B0:40:FE:45:E2:DC:FA:97:DE:82:D5:40:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AF2CE17DFC74A01932200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e12d1eb2-880e-34a0-9f93-77e185eb26e7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.149.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:f2:ce:17:df:c7:4a:01:93:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0247830e-6b82-4ed1-b4b7-a2a850133b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:8b:5b:cf:78:1f:79:a8:ed:cd:e5:c3:b8:
6d:db:ab:14:24:ce:78:1a:9d:10:16:00:e4:19:0e:
2f:19:2f:3d:00:76:70:31:5a:aa:4d:e3:22:ab:ca:
96:14:1f:5d:4f:fe:b6:f0:55:69:fb:a7:49:72:c4:
54:b0:1a:c0:5e:0e:00:53:f9:bf:2a:83:c2:e5:b2:
17:04:51:48:65:82:73:3f:02:a1:ac:e0:5e:f3:35:
51:cb:8e:41:ef:ad:f4:7c:f9:a7:8d:40:00:ea:ed:
e8:3e:17:ea:64:b2:b1:53:74:5c:87:0a:0d:40:53:
48:a4:9d:cf:29:91:44:d9:a8:23:0d:06:68:cc:ba:
fe:7d:3d:df:78:a3:0f:66:67:21:8b:01:9b:f2:5c:
ae:87:3e:5b:7e:6d:b9:12:d5:54:92:05:46:db:8f:
7f:4e:22:9a:e0:29:b2:7a:78:7e:e0:12:ba:74:23:
a2:f1:73:fd:70:a1:27:e8:c7:71:c8:07:00:2a:73:
ce:06:7f:a6:d8:4a:52:11:88:bf:c9:7a:7c:95:a7:
e7:3a:bd:fe:09:a7:1c:4e:83:f3:0e:39:de:64:8e:
49:99:3b:8f:47:cc:8c:ab:9d:bb:c1:17:c7:20:89:
93:1d:f3:1c:3f:b3:ae:35:4e:b6:00:c1:91:07:40:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:AB:76:5E:A0:BC:B0:40:FE:45:E2:DC:FA:97:DE:82:D5:40:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e12d1eb2-880e-34a0-9f93-77e185eb26e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:99:ae:e2:d4:d8:b7:cf:0d:76:7b:f3:7b:8c:47:a8:34:a6:
13:37:b5:1a:2c:5c:47:89:8b:df:9f:ca:2e:20:86:65:7e:c8:
8c:e5:d9:9c:96:61:de:cd:48:d3:84:cf:6c:84:f8:b7:ed:5c:
8f:16:90:b0:75:f8:b0:d1:00:57:3a:7b:22:e4:6c:8b:e9:27:
96:36:79:41:c6:4d:a5:fc:89:03:bd:60:22:61:1b:7d:cc:c1:
3b:41:3f:36:5f:b6:64:46:2c:66:91:b4:e8:9e:bb:9a:6d:75:
ab:4f:5a:38:df:26:bd:4f:ad:0b:c8:13:5d:d6:87:a2:0b:61:
31:36:cb:75:b3:e7:5e:d9:dc:76:5c:98:ab:6e:f6:62:5f:fe:
9a:ca:0c:67:87:a2:81:05:f4:e5:e8:81:f9:a9:24:02:b4:37:
e7:74:53:98:1e:96:e1:bd:c5:5e:84:56:e9:37:c9:29:f8:31:
b6:6c:73:ac:8d:1b:a0:02:d5:bf:9d:3a:35:f1:b8:0e:f4:54:
9f:62:27:ab:cf:4a:d4:07:a4:96:7f:ae:6e:f0:c6:ea:c7:5f:
30:85:ad:a9:f5:2e:c4:f4:a3:8c:2b:57:63:36:d0:ac:4c:ba:
95:cd:7d:7b:7b:b0:d1:71:5a:5e:2b:ae:22:1e:0c:cb:e6:df:
ea:c5:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:36 2025 by rpki-client