Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26d5af1a-2201-3eef-8b1d-a72a0edd395e.roa
File: 26d5af1a-2201-3eef-8b1d-a72a0edd395e.roa (raw, json)
Hash identifier: 8YkJSGCLzCu/7D9N0B6gREML4/cxB92nEu6SS7wRzAs=
Subject key identifier: 76:89:7B:18:49:D7:B1:D7:2C:9C:84:C7:65:F6:9F:F1:D1:5D:20:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8A84FBEC9F23C23717C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26d5af1a-2201-3eef-8b1d-a72a0edd395e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.38.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:a8:4f:be:c9:f2:3c:23:71:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=15d68ed4-0b2e-4d41-ba6c-2d554114cc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:95:57:17:8e:67:c8:7b:83:ee:41:27:d5:
a9:86:71:43:8c:99:80:0c:24:40:b0:d8:f8:be:09:
73:23:e1:9d:19:2c:e4:7c:e5:f4:01:4f:a7:13:4b:
4a:35:be:b0:0d:6d:50:4d:a4:42:66:0c:ff:c7:ee:
5f:e4:53:19:ad:5a:2c:00:2b:a9:b1:b5:dc:02:c1:
c2:68:03:19:a9:d0:5a:26:6d:ca:f0:b0:1f:b1:e7:
8f:76:8f:dd:f3:bf:40:f4:28:b8:35:61:a6:ef:74:
21:0d:df:d5:9d:60:d5:a7:98:16:d1:09:ef:fa:56:
fa:2f:6c:27:2f:ef:f1:93:79:4b:2b:09:f1:a8:74:
85:84:c0:02:f2:41:f3:9a:6c:83:6d:3c:5b:54:26:
b2:63:aa:3e:52:8a:12:54:9c:8c:94:02:87:d2:44:
28:0a:f2:eb:f9:b0:97:a9:0a:67:ec:ad:3c:43:ad:
1c:29:a6:1b:8d:43:0c:cf:e0:fb:e3:91:ca:06:a4:
9d:6b:c7:35:54:13:e2:5f:5e:61:85:bd:23:63:de:
42:b9:c5:5a:97:c2:64:cb:82:3b:4b:de:30:93:4d:
3a:31:ff:a9:70:ce:a9:f5:62:c5:56:f7:da:23:e7:
f5:34:70:9c:87:82:3e:27:80:c8:54:ec:53:71:a7:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:7B:18:49:D7:B1:D7:2C:9C:84:C7:65:F6:9F:F1:D1:5D:20:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26d5af1a-2201-3eef-8b1d-a72a0edd395e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:89:52:4b:be:b8:3d:a2:c7:09:81:0c:dd:9c:77:94:05:1e:
74:02:5c:77:a0:42:a2:ba:2e:97:b3:5f:cf:20:8c:66:de:40:
0f:d8:7f:fd:2c:90:8c:33:83:15:24:e1:a5:4b:0f:6d:c8:38:
f5:22:50:a7:12:e1:4a:90:5f:2f:7d:1b:af:81:c6:05:d1:4f:
0b:48:3e:02:62:16:26:40:16:a7:2c:bc:7f:08:4b:cb:65:b2:
19:73:3f:32:2a:aa:61:02:65:78:a1:a1:15:4b:c6:8d:2f:71:
52:41:49:dc:de:71:37:30:12:c4:86:33:fb:e1:21:57:e7:a5:
c6:25:af:b9:ca:8b:63:d5:d3:de:40:9e:89:a2:59:63:d5:bd:
d6:b8:ca:49:79:82:08:9d:ca:4c:d9:d6:1d:b9:a6:fb:51:00:
b4:1f:dc:43:91:62:ed:61:0b:48:76:1a:24:a7:61:e6:b7:7d:
c2:61:77:13:61:e7:5e:87:86:23:77:d5:fd:b3:26:f0:21:97:
ff:99:0d:c7:f9:45:7b:fa:37:56:31:14:49:3f:0e:22:04:4d:
70:ac:9e:ca:fd:ca:d5:ec:d5:6f:10:9d:b4:4d:ab:f6:1a:10:
57:22:f3:a9:a7:76:f9:8e:8d:29:23:8b:9c:71:52:2c:8e:9f:
06:3d:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:56 2025 by rpki-client