Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/460ed14f-9646-3b43-80be-37d7e34cd1d0.roa
File: 460ed14f-9646-3b43-80be-37d7e34cd1d0.roa (raw, json)
Hash identifier: 4kt++Y/Fpkx74b2qGM/Yggyvvf16kziEUd509yfX4Kc=
Subject key identifier: D0:2D:29:81:F7:DA:21:0C:E4:AC:26:13:17:65:36:B1:40:95:34:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8874217EDE1D560369E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/460ed14f-9646-3b43-80be-37d7e34cd1d0.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.17.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:87:42:17:ed:e1:d5:60:36:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=42a894a9-71ab-4da3-8384-994188133566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:8b:4f:bc:cc:a1:db:e2:55:46:29:af:0f:
31:18:94:38:d2:44:aa:0b:2e:e6:5f:d8:99:22:9b:
88:40:fe:4e:0e:85:3d:19:bf:ce:b2:ef:53:23:df:
1f:03:d0:27:d9:8e:c9:74:2d:91:6a:66:5b:3e:a8:
ed:1c:c3:be:4b:dd:ce:78:59:20:85:0d:ed:f3:e6:
5e:a7:d0:99:48:bc:10:33:9f:5e:b8:98:45:12:5d:
7d:98:23:ca:1c:51:76:63:dc:62:1e:12:f9:10:51:
0a:74:b2:ef:50:92:43:77:ba:7a:e3:df:06:11:2e:
14:69:0d:c1:d3:98:f7:92:42:4b:e9:4d:37:c8:7c:
8f:31:59:aa:76:3e:f5:ca:61:fb:08:a9:00:cb:db:
60:f0:b5:2c:f4:d1:4b:9f:96:de:54:03:09:0f:b8:
d1:19:96:0b:ae:f2:e5:c5:7d:e6:74:dd:e7:87:75:
25:33:19:06:10:0f:a0:0e:68:d2:f8:9e:98:26:5d:
11:b1:c5:e1:69:5f:8e:a4:ec:72:49:62:32:42:a1:
94:25:22:9f:5f:f5:91:65:ae:ec:0b:08:c4:01:30:
34:3d:df:27:2e:8d:62:f2:0f:b8:a9:3b:81:54:ff:
67:69:42:5a:16:75:a9:a8:f3:01:53:25:3c:bd:6c:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:29:81:F7:DA:21:0C:E4:AC:26:13:17:65:36:B1:40:95:34:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/460ed14f-9646-3b43-80be-37d7e34cd1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:9a:37:30:f7:b7:e7:fa:ed:c4:c9:36:64:ac:2c:32:ae:0c:
7a:35:78:07:94:49:ee:a4:7a:af:bc:ec:49:dc:d3:f0:1e:aa:
e0:9c:34:b5:8c:9c:59:58:50:6d:71:2d:95:0b:82:ae:90:e5:
b5:f3:85:b0:28:58:5e:66:08:9f:c6:b0:0b:52:04:48:2a:30:
b4:ec:88:28:77:75:69:29:0e:55:9b:87:c3:ca:5e:55:a6:92:
2b:ac:77:06:35:2c:0c:56:ec:d7:05:27:d6:5b:9e:7a:33:77:
e7:a0:5f:c7:23:d1:11:a9:36:21:97:57:44:9a:db:96:55:82:
52:b2:77:0a:af:17:f7:75:86:f0:f9:41:64:24:d5:3b:ad:d4:
d6:ce:31:3e:68:13:ea:f7:27:85:20:cd:ec:7b:79:50:98:e5:
62:d3:a1:68:52:32:3e:89:99:65:fa:43:ff:66:fb:ca:1a:e1:
d5:27:e0:34:89:99:10:0a:a5:a1:12:c6:40:86:3a:4e:cd:39:
58:0f:c0:98:55:5c:4b:be:82:47:04:a5:3d:65:a6:b7:33:32:
fd:57:5d:fa:d2:9b:79:f7:67:86:4f:c2:b9:3b:9f:20:69:d0:
23:e4:af:0e:5c:ae:22:a5:92:da:8c:8e:a5:c0:bc:e5:10:25:
0c:7e:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:01 2025 by rpki-client