Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec546ca8-85c7-399e-817e-c6b2b8f162f1.roa
File: ec546ca8-85c7-399e-817e-c6b2b8f162f1.roa (raw, json)
Hash identifier: M0K7AWK4H2q6WpfkDS99a9ISWtWyp6wOtRk6VwP7WHc=
Subject key identifier: F0:82:6E:D7:85:80:F3:8C:F5:D3:20:CE:BC:22:FD:7F:EF:35:FA:D3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AF97D7CA86DC603EF6E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec546ca8-85c7-399e-817e-c6b2b8f162f1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.16.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:f9:7d:7c:a8:6d:c6:03:ef:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ab647112-d57e-4b3c-bd32-1c89a1fb265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:c4:69:25:d9:52:58:dd:44:24:1d:5f:51:
0e:dd:00:8a:5f:f8:79:9e:0b:73:07:d8:e3:d4:26:
c6:de:c6:0f:16:23:3a:68:04:ae:12:bb:cb:29:81:
e1:b4:a9:72:11:2a:15:99:75:f9:46:90:d5:ff:72:
7b:73:7c:e7:c6:53:28:c5:d7:06:99:36:7b:0e:f9:
4f:5e:b8:8a:d0:a7:f8:06:75:c2:06:90:dd:85:19:
ce:0b:0a:76:c6:69:87:bc:3c:ea:d1:e4:8d:92:0b:
b1:38:76:97:d1:89:f1:f0:7a:39:03:a6:e1:86:ef:
07:39:9a:81:d2:29:21:47:13:ba:35:c8:f0:08:9f:
40:06:f1:16:ca:75:11:5b:bc:17:61:80:7d:61:12:
64:58:98:45:13:a3:86:3a:9c:7f:e5:c3:1b:45:d7:
70:60:1a:ed:46:88:7f:e8:14:1d:38:da:2d:89:c8:
2a:67:bb:c6:13:dd:80:4c:dd:00:2c:b8:55:d9:2b:
f4:62:30:c4:9d:c9:cc:ae:de:52:ad:4c:65:db:e5:
f9:1a:a8:a1:e8:98:a3:08:f6:5c:f0:b6:22:6b:45:
df:04:83:4f:91:59:69:0a:c0:cb:1b:ac:e8:d4:2a:
5a:78:1e:a1:70:c3:49:fc:c7:c4:ba:16:a0:36:36:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:6E:D7:85:80:F3:8C:F5:D3:20:CE:BC:22:FD:7F:EF:35:FA:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec546ca8-85c7-399e-817e-c6b2b8f162f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.16.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b7:26:1f:40:1f:23:8d:25:1b:77:aa:3a:12:78:4e:84:53:
d4:fa:ad:78:67:34:22:e6:4a:21:fa:1b:26:bb:21:55:db:33:
aa:1f:51:2d:0f:7b:35:a6:f7:db:15:39:e2:c6:a9:16:8d:f3:
66:81:dd:d5:81:6c:30:b8:eb:dd:80:23:3b:72:7d:a0:ac:98:
20:8d:c6:47:ba:03:04:69:da:bb:77:cb:51:04:bd:7c:4e:46:
ef:75:76:9a:c8:48:e7:5f:68:c6:9f:f3:ed:a5:4f:42:cf:90:
e5:db:33:13:08:95:3d:3b:cd:b4:00:2e:d1:f1:ac:98:95:93:
d4:f7:99:9b:6f:60:58:dc:ce:c5:43:6b:49:bf:37:07:c5:ef:
77:63:68:6f:69:bd:2b:9b:ed:09:1a:fd:31:35:53:fc:5d:b8:
f0:2c:a5:bb:bd:a5:e9:e3:49:06:e9:b5:02:df:e1:e0:20:25:
13:ef:8c:25:1a:76:5d:97:05:8b:15:d9:6c:79:41:2c:34:e3:
fc:2a:4d:d4:d6:df:fc:35:d6:7c:bf:4f:87:48:f1:0e:88:13:
9e:ae:3d:a8:9f:f4:61:a5:91:1d:46:a9:18:15:10:5d:40:b3:
da:63:8e:38:13:1a:90:f7:d6:f3:1b:9d:61:4d:25:ff:c2:53:
96:0e:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:55:14 2025 by rpki-client