Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84ce58c-8b59-326d-a1d6-cc3c030b4eab.roa
File: b84ce58c-8b59-326d-a1d6-cc3c030b4eab.roa (raw, json)
Hash identifier: BIZBNNH0uECj3YUqBqIkQK7L3ufwSSaBHApBUErL+zU=
Subject key identifier: 2E:59:80:19:91:F3:D7:20:C1:66:35:76:0F:40:20:ED:71:A2:51:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B8EB3545A9BA80DE74A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84ce58c-8b59-326d-a1d6-cc3c030b4eab.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.108.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:8e:b3:54:5a:9b:a8:0d:e7:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5a68a881-c185-4aac-a6b9-fdd1e4b87d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:d7:b9:2d:dd:b8:c6:85:69:86:dd:60:a2:
eb:ae:6f:de:e3:08:8a:54:ca:58:2e:05:b2:27:11:
d9:3c:24:97:fd:1d:cf:76:06:5e:6e:cc:aa:dd:73:
e6:c6:6f:1d:b0:f2:d2:4e:ac:14:df:4f:ba:d3:15:
df:55:c2:f0:9e:88:d0:33:99:4d:00:b2:f2:01:e7:
45:24:ee:a2:76:63:9f:12:0f:36:a9:91:8e:80:2d:
31:1b:99:2e:00:2b:9c:70:d6:34:ab:df:98:05:48:
28:61:dc:9d:b9:62:44:cf:e6:12:ae:88:90:6e:88:
64:2d:7b:9d:c1:a5:a0:ad:e8:88:88:95:8d:1e:5c:
a2:55:e5:93:77:b9:32:6c:0b:9d:0a:f4:5b:39:df:
a4:0b:59:f9:b5:32:37:8a:d6:ad:eb:e8:36:c2:31:
de:49:41:1a:b8:87:6f:c5:cd:a4:fd:99:24:6b:77:
c5:9f:d7:97:8f:55:a6:cc:41:3e:0f:53:d5:d1:b8:
15:d5:2a:c9:03:d9:24:6c:df:98:79:a6:be:d8:6a:
05:21:04:23:db:fb:bc:10:3a:6c:d8:61:db:9b:63:
02:38:8b:03:42:0d:30:1e:0a:a1:94:e1:1b:90:2d:
4e:4e:ec:5d:80:6a:7d:86:d6:a5:df:36:67:38:eb:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:80:19:91:F3:D7:20:C1:66:35:76:0F:40:20:ED:71:A2:51:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84ce58c-8b59-326d-a1d6-cc3c030b4eab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.108.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ca:51:89:8c:08:9b:31:79:c1:75:97:64:45:ce:34:bc:97:
88:7e:ff:ad:ae:92:ce:34:3e:1b:fe:6d:03:28:83:a0:37:22:
96:a9:8e:a2:41:74:e3:b2:d7:40:0e:f7:2a:c2:1e:e2:57:bc:
69:39:bb:ed:b9:49:84:1d:ae:53:86:a6:7c:c3:06:af:ef:11:
bb:1a:02:7e:a9:7b:d3:5e:6e:f4:c4:bc:b3:a6:b5:ce:05:de:
07:6d:de:b5:65:6a:e8:9e:1a:ce:2f:6c:ad:39:6f:13:bf:db:
a3:10:bc:37:76:7e:c3:08:ce:77:27:7d:b5:2d:ed:1e:3a:9a:
8b:54:2e:a0:0a:55:f9:94:ce:a1:9a:cb:af:8e:9c:f1:7f:74:
ef:1e:0a:47:e1:a3:8d:7f:9f:64:46:1c:4c:5e:e0:cc:65:30:
4f:ed:0b:83:67:e1:90:d1:7d:d2:de:76:1c:19:0f:c4:76:3b:
4b:08:90:27:c0:b2:f1:1a:04:14:01:6a:cf:1d:37:d6:b0:24:
c8:1d:ef:ce:22:2a:e6:cd:da:20:a3:99:1b:2a:b2:06:93:4f:
4e:22:c7:01:68:3a:65:ed:26:97:61:7c:ed:10:14:c4:b2:2e:
30:28:8d:3b:3f:46:02:72:51:f1:76:07:c5:07:d5:0f:0b:dd:
e7:99:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:35 2025 by rpki-client