Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e94e648e-6058-3d81-a2be-f25e094577b7.roa
File: e94e648e-6058-3d81-a2be-f25e094577b7.roa (raw, json)
Hash identifier: 595pMfxIl9IjWWF5WOhNA5wT6ihhLqRszFtxkWoxt4I=
Subject key identifier: 33:C6:44:D4:2D:6A:14:C1:53:6E:0B:C2:69:BC:FF:5D:94:5E:C2:32
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DA15044B1966077D0CD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e94e648e-6058-3d81-a2be-f25e094577b7.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 73.89.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:a1:50:44:b1:96:60:77:d0:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=57997554-058b-4f4c-8247-7e0e7ddc2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:5d:d0:b7:c7:d3:72:3c:4e:64:7a:b8:3b:
62:02:f8:e6:40:f3:ca:0d:d4:eb:9a:98:89:21:d3:
e2:b6:ed:7a:7b:fc:79:69:5e:01:fe:08:37:c7:e9:
e2:59:f6:da:56:76:78:45:3d:f6:27:4e:73:11:88:
26:ec:a9:f1:b5:39:bb:ab:09:c0:43:a3:49:ac:e6:
2f:5d:74:cc:82:52:b4:de:e3:92:77:7a:1f:97:8e:
a4:47:c3:54:41:f4:8a:5b:43:7f:8a:4e:ea:0b:14:
80:35:56:98:9c:00:77:55:fb:41:fd:63:e5:a1:92:
3e:9c:7e:24:8f:7a:0c:f8:53:a2:71:1a:cd:bd:aa:
b0:2b:1f:d5:4d:3c:9c:fb:f7:63:73:69:20:77:7c:
cd:d9:85:31:f7:70:2a:4b:09:c0:02:46:6e:02:da:
b9:2e:e7:60:b8:00:07:26:a1:fe:44:35:5c:21:ad:
c8:89:67:6b:47:8d:ed:fa:57:1e:98:39:d1:3d:ba:
53:04:3b:c8:4f:6f:e1:45:54:2d:56:7f:e8:50:44:
77:59:29:9f:21:45:2a:ee:c6:17:6e:fb:78:86:10:
0c:3f:43:43:70:6c:e8:21:14:2f:79:b4:29:7d:55:
25:b8:f0:f9:0e:e0:3a:b9:f2:52:0f:fb:ce:db:cf:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C6:44:D4:2D:6A:14:C1:53:6E:0B:C2:69:BC:FF:5D:94:5E:C2:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e94e648e-6058-3d81-a2be-f25e094577b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7e:c3:0b:e4:99:fa:d5:c5:b1:37:fa:45:43:41:f2:65:cd:
40:35:47:fc:ed:c2:ed:79:49:69:0e:12:23:5b:dd:02:e1:98:
b1:5a:30:d5:f7:cb:c1:e0:a2:ad:25:2d:05:5b:6f:35:59:1a:
01:1e:05:c9:48:4c:36:ed:8f:36:9d:33:0f:db:63:c1:65:8d:
03:04:d2:73:ac:94:83:65:22:c6:be:03:ca:ab:dd:a7:42:ad:
a0:61:88:68:df:bd:b9:a5:5f:26:41:00:5e:00:ca:8a:ca:f3:
75:ec:c5:30:5b:83:d0:eb:b1:ab:6f:6c:24:12:a5:5a:a3:60:
80:6e:88:54:e3:57:ba:33:ef:71:7a:52:8d:ac:26:18:1b:b9:
c0:55:48:c6:5a:14:cf:c3:94:6e:e7:b9:3b:1c:b6:c3:9a:37:
ea:6a:d6:da:f2:c5:ce:0b:46:bd:f0:09:bc:07:8e:32:dc:f5:
1d:4e:30:0c:ae:82:a7:f3:f0:07:31:3c:15:c8:10:db:c5:5b:
d4:b3:60:87:e5:db:a8:63:df:32:43:05:7e:4d:b4:35:b9:94:
d4:e8:98:13:07:03:e9:91:a3:8f:a6:e7:c3:92:f3:60:be:0d:
6d:7d:c6:f0:10:17:5e:69:12:e2:d5:30:d5:a9:ec:eb:72:8d:
99:49:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:46 2025 by rpki-client