Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/533beb42-dc6d-3326-8f26-87db03ced7aa.roa
File: 533beb42-dc6d-3326-8f26-87db03ced7aa.roa (raw, json)
Hash identifier: XcvLDlUJh7qm4/XQ6EnUvu3reRu3bnR/jXGtqVAEeSw=
Subject key identifier: EB:5B:4D:55:5A:EC:6D:7C:CA:B9:1C:C5:73:21:51:30:46:89:B5:FD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F71EC126541323DF401560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/533beb42-dc6d-3326-8f26-87db03ced7aa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.149.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:1e:c1:26:54:13:23:df:40:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6e101b25-c426-402f-abb1-5e794a98c716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:c4:ed:94:36:b1:0b:f5:c3:01:33:50:69:
27:79:52:a4:0b:c2:ee:ac:28:7f:6f:b9:c4:19:5e:
bb:e9:cd:8f:25:ef:ea:b7:6b:15:00:86:d7:f6:d7:
7d:d5:e2:75:12:7f:6e:e2:4b:bf:78:bc:bb:a0:a0:
17:d2:4e:de:e1:61:9d:e5:58:dd:1f:58:4c:f4:41:
39:e7:f3:98:00:30:fb:84:8b:dc:27:97:9c:d9:d1:
fe:2e:66:b8:b7:7c:5a:72:5a:ac:0c:02:b6:33:e9:
a1:c0:0b:6c:56:f5:b7:7d:c0:7b:a1:55:94:9a:03:
97:b4:c8:91:ac:36:56:08:e3:df:08:99:89:bb:98:
97:ef:21:4e:16:ee:92:cd:50:84:29:6a:7e:8d:78:
9b:3b:ba:43:d2:88:e8:b3:10:24:38:a5:81:1f:a3:
e1:f3:47:f6:12:e5:a2:6f:c0:c9:12:d9:a6:e3:5d:
2f:40:ae:4b:fa:61:6f:92:40:32:f6:d1:a1:28:e4:
b9:49:a7:76:27:28:09:20:83:1a:72:4c:cb:fa:17:
77:1f:51:f3:13:d6:bd:68:6e:6f:30:9d:db:57:a6:
6b:1a:e3:b8:cb:9c:c8:51:8a:66:98:0a:ec:9d:df:
ca:04:4b:99:66:f9:75:23:ac:09:d2:9a:6b:e7:3e:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:4D:55:5A:EC:6D:7C:CA:B9:1C:C5:73:21:51:30:46:89:B5:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/533beb42-dc6d-3326-8f26-87db03ced7aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.149.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d8:7f:a4:63:b6:6f:f8:c1:87:62:52:57:a9:e9:7e:04:be:
f9:cf:e1:e8:c9:cc:aa:a5:9f:c9:70:68:59:ac:94:b2:5d:dc:
ba:6a:ee:cd:c7:53:06:2d:77:1a:d0:bd:62:35:9d:dc:0b:e2:
d8:ad:98:78:a7:b9:ce:b4:19:5f:47:1f:44:88:23:86:78:da:
6c:d6:95:32:9f:30:4b:53:33:79:64:90:b4:72:a0:bc:84:fc:
26:f7:dd:98:31:98:65:f2:cd:bf:6b:3a:65:44:d3:dd:8e:4c:
c6:68:d5:db:fe:2f:ae:08:28:61:09:91:be:59:a2:6b:3b:3c:
24:96:0d:be:bc:15:bf:96:03:bc:63:50:53:88:1a:18:d3:75:
83:8a:07:93:fe:42:e3:e7:ea:33:45:a9:6c:e8:2c:f7:b6:25:
76:23:04:2d:7a:2a:cc:44:07:c1:b7:cc:41:8e:03:03:57:f8:
49:21:4b:06:57:ec:38:5b:3a:81:d3:83:26:9f:23:7c:cb:15:
a0:bb:11:ad:4c:14:5f:31:10:9e:61:f6:b6:87:6b:f3:14:14:
b6:0d:83:bc:87:cf:ed:13:58:15:08:c5:e4:de:f6:95:58:88:
9d:51:36:b0:17:2b:60:29:0b:4f:b8:2c:cd:23:52:f3:6b:15:
3f:50:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:26 2025 by rpki-client