Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12fac28f-84a9-3574-98e2-4435d2b7ecf5.roa
File: 12fac28f-84a9-3574-98e2-4435d2b7ecf5.roa (raw, json)
Hash identifier: bNTTsP2e1UPwhwCuHwnu16AT75lr50XLfa5tKkisYvw=
Subject key identifier: BC:5A:9B:41:DC:98:AC:C2:E1:67:DA:64:76:6D:21:1C:48:D7:ED:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8A049B82420A2EA6FA000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12fac28f-84a9-3574-98e2-4435d2b7ecf5.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.249.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:a0:49:b8:24:20:a2:ea:6f:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e1be49ed-fcff-441b-bccd-967a767a0280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:f7:15:f1:ed:4d:ee:e6:a3:aa:f4:2d:ee:
d9:90:c1:aa:fc:3d:0a:e5:ea:12:9f:30:b6:44:70:
ff:70:5f:ab:55:2a:ef:a8:18:2a:a9:ea:51:45:57:
29:f5:b8:33:33:12:0f:c2:c7:32:00:ed:27:ce:04:
2a:7d:55:78:0d:e6:f1:b5:20:fd:41:ec:39:48:20:
aa:e6:00:c6:69:db:d5:0b:9d:6d:0f:ab:62:d6:c8:
96:4c:ed:be:ee:80:2a:eb:e0:83:7d:e2:f8:ac:9d:
27:44:ac:33:f3:6e:31:32:38:17:37:fb:e1:fe:4d:
21:b0:d0:89:f5:8d:dd:54:82:61:9d:26:30:13:25:
49:23:2b:7a:b6:9e:cf:c2:91:ce:0a:7c:41:84:6e:
ec:4f:3e:9a:2e:c4:97:f6:16:78:01:c8:12:37:9d:
75:3b:ec:c5:83:f9:65:1c:43:26:ac:69:26:e5:c5:
c0:21:b0:5d:eb:d9:0e:e7:31:b6:8c:fb:1e:a0:87:
ed:5f:a7:a4:6d:23:6b:77:41:5f:a9:a1:03:74:3d:
ac:d2:60:60:b5:59:51:37:92:cb:aa:7a:53:78:2e:
7f:fb:57:26:c4:9e:a1:3f:04:1c:1e:77:78:64:12:
24:41:71:e0:78:b5:19:22:11:8d:ec:6a:d1:b8:0e:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5A:9B:41:DC:98:AC:C2:E1:67:DA:64:76:6D:21:1C:48:D7:ED:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12fac28f-84a9-3574-98e2-4435d2b7ecf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:94:f7:6c:40:fa:b7:7f:d1:93:62:6f:28:12:c1:80:f9:b8:
18:28:c6:cd:1e:7e:99:72:44:72:5e:8b:88:06:14:ec:46:58:
f0:ef:c5:ff:8b:2f:3e:8e:e7:c7:73:0f:ec:47:da:9e:68:57:
f4:bd:14:ca:5c:64:fd:8e:8e:a0:96:5e:ef:21:f7:0e:cd:d9:
5b:a2:c4:70:27:96:18:ba:06:5e:a4:32:46:f5:12:ea:8d:c5:
db:05:b3:a8:95:11:30:83:70:18:03:00:4a:74:14:f2:14:7a:
63:70:90:c3:ae:bb:dd:09:9f:64:4e:35:51:b9:71:83:9f:7c:
0c:78:fb:50:85:e4:cd:49:13:bd:59:20:52:59:ba:59:03:c2:
6d:4c:de:55:10:c6:c7:e1:9f:2c:e6:fb:13:58:45:d4:0a:77:
4c:a4:1f:c8:1e:5a:70:52:88:b5:f7:1f:9f:af:ce:24:36:26:
bf:08:4c:cb:0f:ca:e9:ab:6f:ff:ae:e0:3a:09:5c:7f:4f:8b:
e6:83:5d:96:32:13:e9:7c:a6:07:a3:1e:4e:70:48:5a:6e:35:
10:eb:fe:10:b6:9d:b4:9b:11:49:7b:cd:8b:ce:38:e5:7a:b5:
a8:64:fb:21:12:1c:fb:18:a9:61:2a:c2:57:9a:b3:e0:75:d3:
84:2c:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:12 2025 by rpki-client