Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8de39b-d39a-3637-a5c5-8c3feb82c316.roa
File: aa8de39b-d39a-3637-a5c5-8c3feb82c316.roa (raw, json)
Hash identifier: JGVoYzMTkhY5wyRLG5FWW8zcNrJpSFOG5eQkV4LlE20=
Subject key identifier: 4A:B4:E4:B6:4A:1B:C8:42:4C:B2:3E:9A:38:CB:BC:3F:70:3B:A8:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7300A512EEEBE09F96DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8de39b-d39a-3637-a5c5-8c3feb82c316.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.17.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:30:0a:51:2e:ee:be:09:f9:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=698d29df-7493-44d2-a992-b3f15b6f7ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:bf:fd:af:3c:b4:e5:c6:5c:8f:f1:1b:08:
42:b9:66:03:3a:43:2a:3d:3f:df:de:d9:2d:01:af:
fe:58:a7:d3:e8:4e:ad:ee:81:de:cd:d8:b6:c8:a7:
03:93:67:c2:77:78:69:35:0c:b6:a5:e7:1d:bf:c5:
c1:d5:88:e2:d5:96:f5:31:39:28:98:16:aa:63:2c:
58:36:96:e9:5a:2c:2e:b1:93:ed:8d:56:2c:84:f5:
94:eb:d4:6d:6e:9d:f7:32:99:6d:ad:7d:1d:a4:8f:
82:b9:03:b3:da:5b:5d:25:c1:bc:13:9f:4b:43:94:
89:70:1e:ee:96:31:bb:9e:33:60:c8:96:e0:b6:df:
f0:3d:89:84:14:33:f9:fc:b4:4a:c5:7f:32:48:76:
e8:99:2c:f4:61:b1:7d:99:55:48:8d:9f:bd:93:6c:
0d:56:30:af:3a:b6:f8:be:eb:d8:c0:be:99:87:0b:
c7:85:d3:05:ab:12:c7:d5:7a:76:b8:81:63:af:1e:
ab:53:41:1e:ce:10:10:9b:42:b2:91:c5:ab:60:20:
4f:a8:e6:ad:4a:e2:26:68:03:2e:c7:a5:41:28:a2:
02:4d:33:f3:4f:ea:6d:10:8d:fa:88:20:07:18:a9:
22:cb:9d:98:41:cd:8d:39:fe:bf:63:b3:57:29:4a:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B4:E4:B6:4A:1B:C8:42:4C:B2:3E:9A:38:CB:BC:3F:70:3B:A8:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8de39b-d39a-3637-a5c5-8c3feb82c316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:a5:2c:48:34:13:dc:a9:24:79:24:42:93:58:23:ce:12:04:
bc:a5:f9:2b:1a:ee:b1:2e:45:b7:b9:11:c7:ee:cf:70:be:bc:
e2:34:26:ac:ce:ed:b2:12:df:b4:62:b3:dc:7c:4a:0b:2d:06:
6e:dd:25:ee:83:89:bd:3d:db:5d:28:74:16:32:34:38:64:1f:
f1:1c:e9:2e:d1:6f:39:bc:f4:8d:be:ca:b9:42:6b:9d:d7:71:
84:05:42:75:61:95:b2:dd:98:3a:e7:2d:74:87:6d:b0:53:5d:
ce:99:45:c1:09:68:24:df:cd:a2:74:3f:5e:95:37:a8:8c:2f:
a0:95:fc:13:92:7a:4a:e8:7d:e2:6e:a3:47:d1:99:22:15:c7:
8b:30:00:2d:e8:58:4f:93:0d:24:70:90:76:1f:e0:6a:a5:0f:
08:2b:5a:62:13:cc:f3:f2:9f:d9:9c:7e:23:db:b8:c3:bc:b1:
cd:10:e5:1b:39:a2:cd:f1:c8:7a:7f:c3:51:61:e5:c5:29:c8:
66:13:70:35:e0:80:d7:c9:ae:b7:ed:3c:4d:8a:1b:5a:9a:82:
9f:4b:d8:f9:2d:0f:a1:01:ca:3d:92:4b:e4:43:49:87:1f:3f:
1c:27:d4:9d:a7:3b:26:63:5e:c8:3a:96:38:2b:88:d7:2a:12:
3c:96:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:31 2025 by rpki-client