Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b394d3f8-891c-39b7-93cf-ba14a515b252.roa
File: b394d3f8-891c-39b7-93cf-ba14a515b252.roa (raw, json)
Hash identifier: G0lbuOk2ZE+pNH6vYCMtR7K5GMwzd7H/yWRFt2fgH/4=
Subject key identifier: 24:31:0A:D3:CB:27:B2:21:A6:E2:D4:58:C5:AA:93:AA:67:B2:29:94
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8A4D3F58BAD9D91FD9220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b394d3f8-891c-39b7-93cf-ba14a515b252.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.38.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:a4:d3:f5:8b:ad:9d:91:fd:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=c5befe4e-7d50-48ef-9a54-cc612a9fcfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:07:99:24:f2:b9:f2:9c:7c:3c:d3:a6:5f:
a7:43:0b:4d:e7:ea:ad:ed:29:b3:46:f1:46:76:9c:
a6:8d:5f:91:92:ef:b7:20:4e:e2:e6:dc:64:a2:2e:
16:8b:cd:6d:6f:be:1a:50:86:79:83:14:be:6e:9d:
df:ae:ec:71:16:dc:08:4d:2e:ac:40:6b:3d:d4:bd:
6b:53:07:51:f6:97:e1:3d:28:e7:d3:1f:72:2b:aa:
6c:e6:af:d0:90:d2:31:63:a7:8b:3b:53:13:a1:37:
59:47:e9:28:7a:30:82:07:96:6e:28:99:ac:d6:1c:
fb:f5:fa:63:79:71:ae:f6:b1:62:d6:99:d3:76:67:
64:6e:c8:c5:19:eb:09:b5:f4:65:52:2b:6a:f6:54:
7a:dc:cc:82:46:48:58:31:a9:f3:e4:be:d8:aa:1d:
7b:73:0b:54:80:2c:01:bc:5c:e2:aa:07:59:a0:1a:
e3:b8:28:e1:18:b3:4d:cd:34:38:ea:89:85:24:4a:
a7:a7:13:ca:c5:55:ba:1a:93:a4:ac:73:b1:05:6c:
19:47:e4:40:79:83:7f:ee:00:11:b1:49:4a:8e:61:
1e:e7:d8:2b:00:fc:c5:6a:6b:b2:e8:03:99:4d:88:
9f:8d:61:e7:19:b3:7e:ba:e8:67:5f:11:92:df:f7:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:0A:D3:CB:27:B2:21:A6:E2:D4:58:C5:AA:93:AA:67:B2:29:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b394d3f8-891c-39b7-93cf-ba14a515b252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:f5:57:95:fd:27:4d:de:2e:e2:f5:fb:6c:a3:68:f2:89:2e:
fb:e5:65:06:97:fe:13:fe:04:df:8c:77:a8:69:00:d7:f2:0c:
4d:17:5b:dd:ac:b5:cd:a5:1f:36:f9:da:b0:7c:d8:a4:79:25:
f6:aa:40:4b:88:e0:68:9b:c3:7c:e2:9b:10:4f:16:9f:e6:9a:
b5:7d:54:59:16:39:48:b5:9a:e0:6a:fe:a4:86:8b:7c:ec:51:
2e:2d:90:e3:79:48:ac:ec:ba:44:bf:ab:58:36:22:e3:81:e7:
80:63:31:4d:ee:ce:f9:67:6e:a0:91:be:47:42:7d:52:b7:e7:
9e:ee:8e:7b:60:7f:55:b1:f3:fe:cd:d1:83:23:33:ba:37:35:
34:74:7c:72:c9:9f:b9:0f:a4:a3:5a:b6:88:46:fb:e2:a2:3d:
bf:21:7c:97:b1:c6:41:f2:6a:3a:88:1f:de:30:df:49:8e:55:
ba:45:6d:1f:9c:0a:ee:70:a3:40:ce:57:41:26:38:9f:12:c2:
22:30:53:96:37:93:78:62:15:52:be:64:3e:a8:d6:39:f0:fd:
a2:c3:92:47:01:e3:11:e4:f1:20:0b:1d:1b:cb:78:35:42:c8:
74:cb:c9:16:ea:7e:16:1c:eb:06:9a:b8:5e:83:eb:f0:d9:a7:
26:4b:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:32 2025 by rpki-client