Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/847e0dec-bebc-3fa2-ae48-1545b630e4fa.roa
File: 847e0dec-bebc-3fa2-ae48-1545b630e4fa.roa (raw, json)
Hash identifier: bHJGUVVLF+31EbcQ+pjMoOBmlDor10R3LrXnOjiTrTE=
Subject key identifier: CB:04:55:75:7A:96:4E:3C:3C:42:54:3D:4D:37:A9:FF:B2:98:AF:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8A78F47C4D2FEB9FD4C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/847e0dec-bebc-3fa2-ae48-1545b630e4fa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.38.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:a7:8f:47:c4:d2:fe:b9:fd:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6a1bd353-8902-43d7-b4fb-aa23e2849654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:cc:e5:01:0a:14:96:31:41:26:a0:5f:0d:
8d:23:ea:29:64:e6:4c:5a:1e:22:57:a1:bd:a6:93:
94:86:71:9c:12:9c:8a:30:bc:91:62:c5:12:e1:b4:
a4:00:af:1a:c8:bb:f2:1d:62:c4:a3:7a:a1:00:19:
c8:cc:45:4e:c3:98:c1:11:f3:99:08:57:8d:7f:38:
25:56:d2:23:12:02:d7:c3:ad:5a:fe:eb:03:0c:a4:
a5:da:63:e9:f6:a4:44:f2:f8:cf:4c:7f:d5:fe:cb:
1e:69:0c:e0:87:73:a9:18:62:b4:b4:00:08:57:58:
27:4c:ed:3a:37:c4:6e:0a:23:0e:f2:63:5b:d3:76:
f6:ec:8f:93:83:7a:59:5c:51:10:af:7a:69:0c:80:
f0:85:5a:23:1a:a6:ea:95:e4:60:7e:5f:16:8f:9d:
9d:df:ea:ea:36:86:ec:7f:53:47:96:26:f1:39:f9:
97:4c:be:32:91:19:4e:ee:87:6b:7a:0e:d4:85:4b:
ca:bb:21:85:b1:c6:a9:21:90:65:5b:3e:d6:aa:42:
c6:67:52:20:e0:cd:09:cc:ed:db:fa:16:63:0b:4a:
73:e4:ae:fd:e4:7a:f7:03:ed:7a:f0:ac:eb:b2:82:
88:45:cc:38:9f:ca:7b:6a:30:59:ef:12:ad:87:2e:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:55:75:7A:96:4E:3C:3C:42:54:3D:4D:37:A9:FF:B2:98:AF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/847e0dec-bebc-3fa2-ae48-1545b630e4fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a4:86:f4:b2:26:78:c4:62:0b:92:52:c6:c8:32:ec:43:3a:
e9:cc:45:3d:98:d4:cc:ce:3f:8b:1f:4e:da:4d:07:41:15:7f:
02:b8:b9:52:e9:ec:53:2c:ab:3b:47:9d:0e:a0:69:a1:0f:e5:
22:b8:25:60:f2:0b:b7:95:4a:b7:8a:62:fe:1c:1f:f1:53:6b:
98:3f:5b:56:40:f0:9c:56:53:b4:e1:4f:eb:07:a9:91:eb:42:
2b:11:6d:62:8a:b4:8a:b3:e8:a7:37:ae:eb:0f:ca:4c:1a:1c:
08:52:74:ad:ba:68:4b:0e:45:d8:97:14:ad:60:4d:bb:ec:0a:
f8:8f:b0:af:af:b4:0a:0c:93:89:14:83:2a:dd:59:08:4a:db:
82:63:58:a6:da:ae:de:80:c7:6d:2a:2a:77:31:3d:ae:98:74:
75:95:1e:62:c5:b2:2a:2f:46:36:59:17:5c:59:98:52:3a:65:
39:54:e0:be:5e:50:9b:c9:7a:eb:9a:d7:df:50:85:84:81:15:
4f:57:6f:af:78:8a:cf:7e:15:aa:a6:32:38:29:66:e6:d1:f7:
5b:39:fc:d5:17:eb:2f:0d:4b:32:c7:ab:54:56:47:c9:4c:e7:
b6:00:b7:f5:6b:cd:15:2b:f8:6a:ec:c8:d7:b8:bc:e9:cb:f1:
fc:14:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:42:00 2025 by rpki-client