Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5336ab0-7276-3469-993e-0ae222937b2a.roa
File: f5336ab0-7276-3469-993e-0ae222937b2a.roa (raw, json)
Hash identifier: 1AaiBRqJS1stUpz9AXHazbYAXhIo79ror0Jdcn7UCiU=
Subject key identifier: 8A:96:B6:9B:C1:A7:66:EF:E9:A6:E6:5B:34:86:73:FE:B7:AA:4C:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F71845C3D574E5E45DF622
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5336ab0-7276-3469-993e-0ae222937b2a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.126.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:18:45:c3:d5:74:e5:e4:5d:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=cf2f9fa4-0528-4975-a83d-7a3bfeb2735b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:e1:9a:1f:3e:0c:fc:c5:8a:a2:48:f5:75:
d9:2c:11:30:8d:a5:34:06:a5:d3:53:aa:a5:93:0b:
d5:06:b8:29:33:a5:97:05:c3:ba:c2:3b:d6:33:e8:
14:11:66:a1:53:ca:ff:f4:24:87:be:17:fc:cc:ec:
1b:37:75:e2:d0:4d:8e:cd:cd:58:be:c1:76:4c:02:
50:b3:24:61:6c:81:9c:ca:06:d4:32:da:c5:f2:3b:
20:ba:60:0c:c9:0c:b7:a6:d0:4e:ce:52:a5:4c:be:
e6:9b:47:ca:fe:da:03:9d:95:ad:0e:4e:68:23:4b:
6e:c4:bf:ff:ee:5d:f3:a3:36:4e:38:65:eb:91:f8:
be:8d:d4:f6:97:81:73:e0:36:94:38:4f:34:a8:ef:
fb:ec:2d:0d:2c:b8:c2:55:22:47:f9:41:09:33:f0:
61:6a:42:58:17:03:a8:93:84:68:de:81:6f:49:c7:
b1:1e:62:84:91:e5:a2:36:8f:47:1c:10:f7:d9:77:
8a:f2:16:d7:ad:b5:cf:c5:b8:99:49:c7:a6:ab:d1:
59:4a:74:26:d6:74:cb:eb:05:4f:c6:dc:07:9f:a9:
d7:6b:24:79:e8:65:d3:cb:bd:17:5d:94:3f:5b:17:
63:4d:b9:27:66:43:57:66:57:e5:65:aa:c6:90:76:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:96:B6:9B:C1:A7:66:EF:E9:A6:E6:5B:34:86:73:FE:B7:AA:4C:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5336ab0-7276-3469-993e-0ae222937b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.126.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:15:3a:b6:06:e1:19:a6:eb:fa:ac:f8:e8:ea:cd:1e:74:50:
b4:18:c4:9b:de:45:d5:6a:91:61:08:e4:bf:39:bc:d4:dc:ee:
89:2b:cf:dc:6b:31:c5:26:d8:1f:89:d9:e5:7e:ee:e8:83:49:
2c:ff:e0:69:57:6a:95:2b:8c:c6:ce:18:5a:f6:1a:15:85:30:
1d:6e:87:74:3e:e3:b0:13:da:bf:ab:c5:a5:75:08:f4:13:12:
fa:32:5a:5a:d4:5e:f1:e9:59:6a:65:a5:fd:ec:d4:71:00:73:
65:c0:ca:22:70:fd:67:16:41:79:82:c4:aa:d2:06:33:38:07:
e0:e7:73:7f:c1:44:c6:4e:27:d0:2a:ec:00:6a:4b:d4:7a:f0:
2e:c3:dc:bb:e5:b3:42:10:b3:a7:21:f8:e1:85:6f:e4:8c:ec:
b9:25:a0:9e:f3:8e:bd:4a:ff:8d:f8:01:b7:ef:0b:87:28:85:
b4:30:df:e6:13:c2:86:4f:2b:00:bf:7c:42:fe:1e:eb:ce:d7:
e5:4b:30:cd:e6:6d:57:86:c3:cf:ee:31:33:ad:d1:ad:9d:40:
b7:00:04:c5:a2:f6:89:0d:3d:93:b6:43:ac:21:57:a6:32:a4:
05:1c:a2:96:c6:d9:01:45:ae:f6:91:54:72:e8:0b:3e:22:4e:
dd:c2:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:37 2025 by rpki-client