Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa
File: 1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa (raw, json)
Hash identifier: JYxk83L39MjHCkdgZZrxtE5JGypyiWvq9fG2AFjBhEs=
Subject key identifier: D1:ED:45:35:C0:19:F6:F3:BD:74:90:80:6F:EE:2A:6C:96:A0:32:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F71ECEB76CE97A54F22500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.149.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:1e:ce:b7:6c:e9:7a:54:f2:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=841d33a2-807f-40c2-ac1d-a573bdfe9930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:7f:c3:f5:65:75:29:19:8a:c5:ff:d7:68:
04:bc:c5:d7:03:98:8c:c6:c0:78:17:ec:eb:61:ae:
b2:3f:ae:79:02:29:4b:81:2b:ab:8b:4b:b1:85:6c:
fc:a9:77:9f:fd:1b:37:09:d3:c3:3b:7e:59:58:27:
07:f9:83:af:75:67:ba:ff:4b:bb:7d:a3:50:8e:a3:
43:d6:2e:f3:40:c4:36:c3:d0:6e:35:8b:0e:ee:c8:
d8:a0:97:4a:f6:42:23:39:6f:c8:64:c9:f0:e5:72:
28:5b:ab:00:c9:26:d2:31:81:2c:39:d2:ae:74:3a:
69:5a:93:90:f2:2a:d4:ea:21:90:43:ad:96:2e:b7:
2a:0f:7c:72:9f:cc:e3:d9:33:28:e7:0d:9b:0a:11:
28:c8:fc:3a:1a:b5:64:67:df:bc:05:8c:86:b4:a6:
89:f7:fb:e6:52:73:24:4a:51:c1:c2:9d:b4:23:34:
83:86:4e:7d:fc:f9:91:c0:23:a4:5c:c1:48:a4:ea:
4d:bf:ef:35:71:67:c0:49:95:82:1c:e5:ca:51:61:
97:c5:db:4a:b5:b8:89:7e:68:61:eb:4e:85:3e:85:
34:ab:3a:5e:4b:bd:5c:86:57:17:49:6d:4d:88:b3:
aa:8b:76:88:ff:6a:58:6f:34:9e:9e:49:68:64:c7:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:45:35:C0:19:F6:F3:BD:74:90:80:6F:EE:2A:6C:96:A0:32:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fcfa7c0-3354-3fa3-9c8c-cbaa1937881d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:13:50:4d:a6:4b:7f:bd:57:84:a7:60:4a:f4:7e:a8:02:af:
81:1a:90:97:9b:d8:90:81:9e:62:2a:25:b6:5f:95:0f:06:89:
73:07:5d:3c:e0:26:ac:f7:dc:36:a3:eb:d4:af:0c:25:88:3e:
75:0c:cb:35:f0:9a:58:bf:96:5d:8e:6a:95:1b:6e:b6:e5:34:
aa:1d:0b:3a:c8:e7:6a:d1:12:97:31:52:8e:e7:12:cb:ae:11:
72:c2:da:0c:4c:c6:b6:4c:e9:40:97:a3:57:a6:9d:fd:1f:6b:
d5:6f:b8:f6:64:72:d2:0f:82:af:ce:47:cb:e3:c7:dc:5f:b0:
74:ed:f8:fe:aa:0a:c4:e9:08:f3:24:9c:0f:60:05:95:1d:73:
97:0f:f7:1b:90:d9:61:7d:44:4f:d0:6b:a5:f5:1c:ee:f8:28:
b1:be:50:79:97:e0:db:fe:57:28:67:fc:40:f4:56:bc:c1:18:
49:32:f4:ba:34:94:32:20:66:b2:59:01:ab:d6:ba:6e:f4:5d:
c7:62:77:19:c1:3f:5d:36:65:48:c7:bb:bb:94:1c:a9:f1:4d:
a9:00:ba:8e:34:fc:27:d2:27:87:ba:8a:b3:a6:c8:f7:21:fc:
5f:31:c1:5c:b3:d6:a7:0c:86:0f:95:7c:09:11:b7:65:ce:5f:
a5:98:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:52 2025 by rpki-client