Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bf4d015-d7de-3069-9240-64017ca98280.roa
File: 0bf4d015-d7de-3069-9240-64017ca98280.roa (raw, json)
Hash identifier: vPGFFSlC4oNXKag7wmAYNPIwoaY0Q15UxpVQ9Bxs5xo=
Subject key identifier: 5F:13:F4:84:EB:D3:76:AE:CE:D4:0E:18:7F:06:1A:F0:5C:7C:EF:F1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DA12D9AC3E49BD8774D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bf4d015-d7de-3069-9240-64017ca98280.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 73.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:a1:2d:9a:c3:e4:9b:d8:77:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f0e07331-a953-4977-84b9-225a893e0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:80:e4:57:5c:13:48:3b:a5:2f:bc:8d:c5:
58:61:c0:69:a6:5f:30:4b:a1:83:bb:9b:df:4c:d3:
b6:10:30:1c:db:0a:12:b6:14:45:18:18:b4:14:a7:
5b:8b:dc:07:a6:e2:bc:dc:88:8e:4e:64:44:a2:a8:
b8:1e:92:6f:85:53:16:6d:8a:f1:8c:61:00:1c:0c:
af:15:92:4c:d5:a6:08:42:14:23:45:94:88:c9:af:
d3:ff:59:2c:75:d9:c3:c5:4b:95:42:53:10:64:7f:
34:db:e4:29:6b:ad:8f:43:81:03:b1:f5:92:c9:90:
bd:17:93:8a:1d:0f:28:99:3a:2e:bd:1f:ba:d7:70:
dd:a4:ce:2c:8b:77:93:aa:6d:f7:0d:75:4d:bd:a1:
ea:30:9c:a1:aa:a8:24:af:a4:e4:f4:ed:d2:e5:86:
ba:da:36:a2:26:a4:6e:97:93:3e:06:8e:34:3a:40:
d9:48:33:67:3e:d1:91:ab:15:52:31:43:70:34:e9:
8a:a7:1f:30:9c:ac:5e:87:39:64:f5:7a:e4:1f:6c:
da:7f:e6:a6:b1:55:c5:f8:46:de:3c:55:f1:40:b3:
18:02:a6:a2:5e:84:99:7d:39:95:17:67:44:0b:23:
c4:d7:55:58:5e:38:fb:9d:b4:44:2a:d0:e3:bd:c4:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:F4:84:EB:D3:76:AE:CE:D4:0E:18:7F:06:1A:F0:5C:7C:EF:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bf4d015-d7de-3069-9240-64017ca98280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:9a:3b:55:03:69:81:fe:87:e8:cf:8d:41:29:e2:a1:1f:ae:
a6:ee:a2:8b:14:03:2c:74:34:6a:6b:51:1a:8b:55:1a:9f:6c:
8c:2b:cc:4e:1f:6f:5c:95:11:6e:60:c7:03:c4:5a:a1:b3:8c:
b3:75:f1:70:39:62:b1:8a:67:dd:3c:ce:e5:76:c0:3f:7f:84:
89:40:c1:94:66:b5:69:3c:9e:97:0c:07:45:0e:9f:d2:60:cf:
ec:b0:d9:96:4a:b4:59:58:00:c5:1c:fe:5f:af:af:ee:32:f3:
9f:c3:9e:56:1b:e8:19:80:50:56:40:4d:48:12:d0:ba:8c:69:
9e:50:6f:6f:2b:19:49:17:2f:3e:92:a7:dc:06:be:e8:6f:c7:
53:41:eb:ab:2a:69:c0:9a:22:cc:7b:02:2b:df:45:48:3f:c5:
fe:27:ea:2f:91:7c:de:bf:d9:77:8e:57:1d:90:18:37:85:5e:
21:92:64:f7:37:03:d1:f0:f6:06:0f:a3:ff:9a:3a:32:93:0d:
3d:c6:36:24:10:12:db:45:6b:57:e4:a4:5a:1c:7f:f4:b7:a2:
e4:c7:28:35:fa:39:e8:ae:d5:7e:9d:1f:62:80:6f:1a:dd:21:
28:40:57:be:c7:01:7c:84:2d:c2:d6:9a:52:1f:0a:09:8c:aa:
14:ff:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:21 2025 by rpki-client