Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dbf994-8596-3e75-9b8e-519f91de6e8d.roa
File: 40dbf994-8596-3e75-9b8e-519f91de6e8d.roa (raw, json)
Hash identifier: 0+rbglMndExfFgPT7gfeAf7mbeeCP/wJCxZGosRM69k=
Subject key identifier: B8:85:1F:E6:21:E4:0A:6B:4C:31:DA:D0:48:D0:72:DD:ED:BF:E2:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F75A4E24F7332B391B5300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dbf994-8596-3e75-9b8e-519f91de6e8d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 75.67.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:5a:4e:24:f7:33:2b:39:1b:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=8b7a54a1-e4a0-4f5a-bb32-ad779d8a50c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:4e:79:12:c6:dd:9b:6e:f6:da:a4:28:e1:
0e:1b:2f:e1:80:6c:29:c8:64:36:de:96:fb:33:d9:
9a:cb:e4:fe:29:6d:d0:11:02:b5:07:53:f6:08:da:
37:46:c7:23:0c:e8:f9:46:58:12:79:1b:3f:91:a3:
ff:91:6c:2f:77:fb:e5:83:4e:e6:5b:77:c7:64:29:
82:eb:e5:29:26:53:7b:4e:d5:32:55:9a:6e:ed:85:
15:af:2b:e6:a4:79:58:43:40:61:2a:09:d5:e4:0b:
67:e2:08:39:b7:07:7b:de:db:57:30:50:e8:79:b5:
5f:d8:0c:e5:e3:13:d4:84:d3:e9:6d:87:98:b5:7e:
7b:80:a8:b1:f1:bc:70:f6:d8:99:69:19:64:8e:df:
54:f4:b7:98:f6:74:6c:ee:92:c0:19:6c:a4:b4:2e:
e7:bb:57:c2:9a:f9:de:f8:5e:75:77:22:51:36:67:
a3:67:6a:32:39:39:4f:3d:c4:8d:45:44:d6:91:ee:
45:bd:13:31:45:c8:89:90:59:0c:a3:25:ca:9a:24:
ca:54:d8:b4:e8:0e:83:32:00:8d:e6:28:18:a2:b9:
e2:52:94:84:42:69:68:8f:47:97:23:cc:95:67:e1:
56:03:c3:d1:cf:13:55:ad:ea:ab:c5:57:bd:fd:17:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:1F:E6:21:E4:0A:6B:4C:31:DA:D0:48:D0:72:DD:ED:BF:E2:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dbf994-8596-3e75-9b8e-519f91de6e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
75.67.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:14:d8:c6:f1:7e:24:5e:da:18:f1:0d:5e:03:26:93:05:01:
e5:3a:01:92:5d:16:7b:76:20:39:02:f7:cc:53:3f:ab:6b:32:
63:9f:09:99:8a:61:46:4f:38:39:4e:f0:74:28:00:7f:11:fa:
81:87:17:3f:a9:c2:5f:3b:79:0c:7c:de:58:a4:d0:0b:37:04:
ca:1a:d7:2b:e9:19:10:3f:a8:82:9c:27:8d:8e:bf:d4:5c:8a:
90:87:4b:27:03:4d:62:d3:b7:dd:04:17:c1:77:ce:19:6a:59:
0b:eb:b6:2b:8f:b8:2f:9b:0c:c6:58:28:06:d6:06:f9:f0:24:
48:fb:54:f5:d3:86:83:48:bd:b4:2b:4b:89:0b:03:a8:80:b9:
30:b9:21:da:ee:d3:91:56:b8:48:85:0b:43:7a:0f:ae:42:7b:
61:16:60:48:c7:fd:bb:af:54:73:97:21:49:fb:5e:14:24:ae:
c5:17:64:d6:54:87:1e:3d:b3:a5:4b:7b:7c:9b:aa:cc:ea:f0:
8b:ad:fa:82:16:6f:8d:80:f5:08:75:fd:49:56:63:f5:29:9c:
f3:bf:4c:f0:49:a5:12:59:2e:db:bb:ba:ef:67:b2:a7:7e:b1:
05:2c:23:89:71:1a:2e:ee:58:f8:89:8a:8e:4d:fd:f9:72:37:
b3:e3:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:52 2025 by rpki-client